JDK-8032631 : It takes a long time to load sandbox app after accepting a multi-click dialog caused by "the certificate revocation site cannot be accessed"
  • Type: Bug
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 8
  • Priority: P3
  • Status: Resolved
  • Resolution: Duplicate
  • Submitted: 2014-01-24
  • Updated: 2014-03-26
  • Resolved: 2014-01-27
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8
8u20Resolved
Related Reports
Relates :  
JDK-8032676 - RDF (8029649) can cause performance problem when Revocation check times out.
Description
Steps to reproduce:
1) Make sure there is no proxy set in your system/browser
2) Load sandbox applet which is signed with a certificate that need to access a internet CRL http://crl.certum.pl/ctnca.crl:
http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/OcspAndCrlCheck/html/testFailToAccessCerRevoSite_SB.html
3) The cert revocation site cannot be accessed since there is no proxy set in system/browser
4) There will be a multi-click dialog shown up.
5) Click "I accept..." and "Run" button
6) If it takes a long time to load the SB applet, then this bug is reproduced.
Expected behavior:
The sandbox applet should get loaded immediately after accepting the multi-click dialog.
From java console, seems it's still try to connect to crl link after accepting a multi-click dialog.


Note: no such issue for all-permission apps:
repeat above steps with the following all-permission app: 
http://sqeweb.us.oracle.com/net/sqenfs-1/export1/comp/jsn/users/crystal/DO_NOT_REMOVE_ME/jrebug/OcspAndCrlCheck/html/testFailToAccessCerRevoSite.html
The all-permission applet gets loaded immediately after accepting the multi-click dialog.
Comments
JDK-8029260
27-01-2014
Release team: Approved for deferral.
27-01-2014
Looks like it's a duplicate of JDK-8029260. The steps for reproducing are identical. 8029260 was pushed to 7u55 & 8u5, not to 8.
27-01-2014
SQE-OK to defer this issue to 8u20
24-01-2014
Defer request to 8u20: P3 performance issue not a showstopper for JDK 8. This is not a recent regression and the issue occurs in JDK7 updates.
24-01-2014
I think we can defer this from JDK8 - the behavior is not the same in 8u5 due to https://bugs.openjdk.java.net/browse/JDK-8029649. In 8u5, there is a further problem caused by https://bugs.openjdk.java.net/browse/JDK-8029649 (filed as https://bugs.openjdk.java.net/browse/JDK-8032676) The problem in JDK8 is mainly a mater of not having a cache of OCSP and CRL responses, and exists in JDK7 update releases pre-dating JDK8. (see: https://bugs.openjdk.java.net/browse/JDK-8009672)
24-01-2014
regression_test_src: http://sqe-hg.us.oracle.com/hg/index.cgi/testbase/javase/functional/8/deployment2/file/ac5c3ad129a0/new_framework/tests/plugin/OcspAndCrlCheck/src/OcspAndCrlCheckTest.java
24-01-2014
Affected tests: OcspAndCrlCheckTest::testFailToAccessCerRevoSite_JNLP_High_SB OcspAndCrlCheckTest::testFailToAccessCerRevoSite_High_SB OcspAndCrlCheckTest::testFailToAccessCerRevoSite_JNLP_Medium_SB OcspAndCrlCheckTest::testFailToAccessCerRevoSite_Medium_SB
24-01-2014