JDK-8300939 : sun/security/provider/certpath/OCSP/OCSPNoContentLength.java fails due to network errors
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 21
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • Submitted: 2023-01-23
  • Updated: 2024-04-23
  • Resolved: 2023-03-14
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 17 JDK 21
17.0.12-oracleFixed 21 b14Fixed
Related Reports
Duplicate :  
JDK-8254600 - javax/net/ssl/Stapling/StapleEnableProps.java failed with "SSLException: The status_request_v2 extension is inconsistent with the expected result: expected = true, actual = false"
Relates :  
JDK-8296343 - CPVE thrown on missing content-length in OCSP response
Relates :  
JDK-8300946 - Add sun/security/provider/certpath/OCSP/OCSPNoContentLength to ProblemList
Sub Tasks
JDK-8300946 :  
Add sun/security/provider/certpath/OCSP/OCSPNoContentLength to ProblemList - Resolved
Description
The new sun/security/provider/certpath/OCSP/OCSPNoContentLength appears to be failing due to a SocketException occurring when the client CertPathValidator tries to perform a OCSP lookup on the certificate.

System.err reports:
java.security.cert.CertPathValidatorException: Unable to determine revocation status due to network error
	at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
	at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:224)
	at java.base/sun.security.provider.certpath.PKIXCertPathValidator.validate(PKIXCertPathValidator.java:144)
	at java.base/sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:83)
	at java.base/java.security.cert.CertPathValidator.validate(CertPathValidator.java:309)
	at OCSPNoContentLength.main(OCSPNoContentLength.java:90)
	at java.base/jdk.internal.reflect.DirectMethodHandleAccessor.invoke(DirectMethodHandleAccessor.java:104)
	at java.base/java.lang.reflect.Method.invoke(Method.java:578)
	at com.sun.javatest.regtest.agent.MainWrapper$MainThread.run(MainWrapper.java:125)
	at java.base/java.lang.Thread.run(Thread.java:1623)
Caused by: java.net.SocketException: Connection reset
	at java.base/sun.nio.ch.NioSocketImpl.implRead(NioSocketImpl.java:313)
	at java.base/sun.nio.ch.NioSocketImpl.read(NioSocketImpl.java:341)
	at java.base/sun.nio.ch.NioSocketImpl$1.read(NioSocketImpl.java:791)
	at java.base/java.net.Socket$SocketInputStream.read(Socket.java:1099)
	at java.base/java.io.BufferedInputStream.fill(BufferedInputStream.java:258)
	at java.base/java.io.BufferedInputStream.read1(BufferedInputStream.java:313)
	at java.base/java.io.BufferedInputStream.implRead(BufferedInputStream.java:386)
	at java.base/java.io.BufferedInputStream.read(BufferedInputStream.java:365)
	at java.base/java.io.FilterInputStream.read(FilterInputStream.java:119)
	at java.base/sun.net.www.protocol.http.HttpURLConnection$HttpInputStream.read(HttpURLConnection.java:3652)
	at java.base/java.io.InputStream.readNBytes(InputStream.java:409)
	at java.base/java.io.InputStream.readAllBytes(InputStream.java:346)
	at java.base/sun.security.provider.certpath.OCSP.getOCSPBytes(OCSP.java:223)
	at java.base/sun.security.provider.certpath.OCSP.check(OCSP.java:133)
	at java.base/sun.security.provider.certpath.RevocationChecker.checkOCSP(RevocationChecker.java:780)
	at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:369)
	at java.base/sun.security.provider.certpath.RevocationChecker.check(RevocationChecker.java:343)
	at java.base/sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:125)
	... 9 more

JavaTest Message: Test threw exception: java.security.cert.CertPathValidatorException: Unable to determine revocation status due to network error
JavaTest Message: shutting down test

STATUS:Failed.`main' threw exception: java.security.cert.CertPathValidatorException: Unable to determine revocation status due to network error
Comments
A pull request was submitted for review. URL: https://git.openjdk.org/jdk8u-dev/pull/333 Date: 2023-06-07 18:28:23 +0000
07-06-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk11u-dev/pull/1921 Date: 2023-05-31 17:10:40 +0000
31-05-2023
Fix request [17u] Required fix for tests after JDK-8296343. No risk, test only.
25-05-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk17u-dev/pull/1394 Date: 2023-05-24 14:44:08 +0000
24-05-2023
Changeset: da044dd5 Author: Jamil Nimeh <jnimeh@openjdk.org> Date: 2023-03-14 15:42:47 +0000 URL: https://git.openjdk.org/jdk/commit/da044dd5698d14eccd2a30a24cc691e30fa00cbd
14-03-2023
A pull request was submitted for review. URL: https://git.openjdk.org/jdk/pull/12370 Date: 2023-02-01 18:10:41 +0000
01-02-2023