Skip to content
This repository was archived by the owner on Jul 17, 2024. It is now read-only.
/ jdk22u Public archive

Commit 8d7d8a4

Browse files
shipilevshipilev
committedApr 4, 2024
8328638: Fallback option for POST-only OCSP requests
8329213: Better validation for com.sun.security.ocsp.useget option Backport-of: 614db2ea9e10346475eef34629eab54878aa482d
·
jdk-22.0.2+9jdk-22.0.2-ga
1 parent 2374d1e commit 8d7d8a4

File tree

5 files changed

+127
-5
lines changed

5 files changed

+127
-5
lines changed
 

‎src/java.base/share/classes/sun/security/action/GetPropertyAction.java

+33
Original file line numberDiff line numberDiff line change
@@ -224,4 +224,37 @@ public static int privilegedGetTimeoutProp(String prop, int def, Debug dbg) {
224224
return def;
225225
}
226226
}
227+
228+
/**
229+
* Convenience method for fetching System property values that are booleans.
230+
*
231+
* @param prop the name of the System property
232+
* @param def a default value
233+
* @param dbg a Debug object, if null no debug messages will be sent
234+
*
235+
* @return a boolean value corresponding to the value in the System property.
236+
* If the property value is neither "true" or "false", the default value
237+
* will be returned.
238+
*/
239+
public static boolean privilegedGetBooleanProp(String prop, boolean def, Debug dbg) {
240+
String rawPropVal = privilegedGetProperty(prop, "");
241+
if ("".equals(rawPropVal)) {
242+
return def;
243+
}
244+
245+
String lower = rawPropVal.toLowerCase(Locale.ROOT);
246+
if ("true".equals(lower)) {
247+
return true;
248+
} else if ("false".equals(lower)) {
249+
return false;
250+
} else {
251+
if (dbg != null) {
252+
dbg.println("Warning: Unexpected value for " + prop +
253+
": " + rawPropVal +
254+
". Using default value: " + def);
255+
}
256+
return def;
257+
}
258+
}
259+
227260
}

‎src/java.base/share/classes/sun/security/provider/certpath/OCSP.java

+33-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/*
2-
* Copyright (c) 2009, 2023, Oracle and/or its affiliates. All rights reserved.
2+
* Copyright (c) 2009, 2024, Oracle and/or its affiliates. All rights reserved.
33
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
44
*
55
* This code is free software; you can redistribute it and/or modify it
@@ -85,6 +85,28 @@ public final class OCSP {
8585
private static final int READ_TIMEOUT = initializeTimeout(
8686
"com.sun.security.ocsp.readtimeout", DEFAULT_READ_TIMEOUT);
8787

88+
/**
89+
* Boolean value indicating whether OCSP client can use GET for OCSP
90+
* requests. There is an ambiguity in RFC recommendations.
91+
*
92+
* RFC 5019 says a stronger thing, "MUST":
93+
* "When sending requests that are less than or equal to 255 bytes in
94+
* total (after encoding) including the scheme and delimiters (http://),
95+
* server name and base64-encoded OCSPRequest structure, clients MUST
96+
* use the GET method (to enable OCSP response caching)."
97+
*
98+
* RFC 6960 says a weaker thing, "MAY":
99+
* "HTTP-based OCSP requests can use either the GET or the POST method to
100+
* submit their requests. To enable HTTP caching, small requests (that
101+
* after encoding are less than 255 bytes) MAY be submitted using GET."
102+
*
103+
* For performance reasons, we default to stronger behavior. But this
104+
* option also allows to fallback to weaker behavior in case of compatibility
105+
* problems.
106+
*/
107+
private static final boolean USE_GET = initializeBoolean(
108+
"com.sun.security.ocsp.useget", true);
109+
88110
/**
89111
* Initialize the timeout length by getting the OCSP timeout
90112
* system property. If the property has not been set, or if its
@@ -99,6 +121,15 @@ private static int initializeTimeout(String prop, int def) {
99121
return timeoutVal;
100122
}
101123

124+
private static boolean initializeBoolean(String prop, boolean def) {
125+
boolean value =
126+
GetPropertyAction.privilegedGetBooleanProp(prop, def, debug);
127+
if (debug != null) {
128+
debug.println(prop + " set to " + value);
129+
}
130+
return value;
131+
}
132+
102133
private OCSP() {}
103134

104135
/**
@@ -186,7 +217,7 @@ public static byte[] getOCSPBytes(List<CertId> certIds, URI responderURI,
186217
encodedGetReq.append(URLEncoder.encode(
187218
Base64.getEncoder().encodeToString(bytes), UTF_8));
188219

189-
if (encodedGetReq.length() <= 255) {
220+
if (USE_GET && encodedGetReq.length() <= 255) {
190221
url = new URI(encodedGetReq.toString()).toURL();
191222
con = (HttpURLConnection)url.openConnection();
192223
con.setConnectTimeout(CONNECT_TIMEOUT);

‎test/jdk/java/security/cert/CertPathValidator/OCSP/GetAndPostTests.java

+4-2
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/*
2-
* Copyright (c) 2020, 2023, Oracle and/or its affiliates. All rights reserved.
2+
* Copyright (c) 2020, 2024, Oracle and/or its affiliates. All rights reserved.
33
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
44
*
55
* This code is free software; you can redistribute it and/or modify it
@@ -23,14 +23,16 @@
2323

2424
/**
2525
* @test
26-
* @bug 8179503
26+
* @bug 8179503 8328638
2727
* @summary Java should support GET OCSP calls
2828
* @library /javax/net/ssl/templates /java/security/testlibrary
2929
* @build SimpleOCSPServer
3030
* @modules java.base/sun.security.util
3131
* java.base/sun.security.provider.certpath
3232
* java.base/sun.security.x509
3333
* @run main/othervm GetAndPostTests
34+
* @run main/othervm -Dcom.sun.security.ocsp.useget=false GetAndPostTests
35+
* @run main/othervm -Dcom.sun.security.ocsp.useget=foo GetAndPostTests
3436
*/
3537

3638
import java.io.ByteArrayInputStream;

‎test/jdk/java/security/testlibrary/SimpleOCSPServer.java

+10-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/*
2-
* Copyright (c) 2015, 2023, Oracle and/or its affiliates. All rights reserved.
2+
* Copyright (c) 2015, 2024, Oracle and/or its affiliates. All rights reserved.
33
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
44
*
55
* This code is free software; you can redistribute it and/or modify it
@@ -702,6 +702,9 @@ public CRLReason getRevocationReason() {
702702
* responses.
703703
*/
704704
private class OcspHandler implements Runnable {
705+
private final boolean USE_GET =
706+
!System.getProperty("com.sun.security.ocsp.useget", "").equals("false");
707+
705708
private final Socket sock;
706709
InetSocketAddress peerSockAddr;
707710

@@ -874,6 +877,12 @@ private LocalOcspRequest parseHttpOcspPost(InputStream inStream)
874877
// Okay, make sure we got what we needed from the header, then
875878
// read the remaining OCSP Request bytes
876879
if (properContentType && length >= 0) {
880+
if (USE_GET && length <= 255) {
881+
// Received a small POST request. Check that our client code properly
882+
// handled the relevant flag. We expect small GET requests, unless
883+
// explicitly disabled.
884+
throw new IOException("Should have received small GET, not POST.");
885+
}
877886
byte[] ocspBytes = new byte[length];
878887
inStream.read(ocspBytes);
879888
return new LocalOcspRequest(ocspBytes);

‎test/jdk/security/infra/java/security/cert/CertPathValidator/certification/CAInterop.java

+47
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,9 @@
3030
* @run main/othervm -Djava.security.debug=certpath,ocsp
3131
* CAInterop actalisauthenticationrootca OCSP
3232
* @run main/othervm/timeout=180 -Djava.security.debug=certpath,ocsp
33+
* -Dcom.sun.security.ocsp.useget=false
34+
* CAInterop actalisauthenticationrootca OCSP
35+
* @run main/othervm/timeout=180 -Djava.security.debug=certpath,ocsp
3336
* CAInterop actalisauthenticationrootca CRL
3437
*/
3538

@@ -40,6 +43,7 @@
4043
* @library /test/lib
4144
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
4245
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop amazonrootca1 OCSP
46+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop amazonrootca1 OCSP
4347
* @run main/othervm -Djava.security.debug=certpath CAInterop amazonrootca1 CRL
4448
*/
4549

@@ -50,6 +54,7 @@
5054
* @library /test/lib
5155
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
5256
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop amazonrootca2 OCSP
57+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop amazonrootca2 OCSP
5358
* @run main/othervm -Djava.security.debug=certpath CAInterop amazonrootca2 CRL
5459
*/
5560

@@ -60,6 +65,7 @@
6065
* @library /test/lib
6166
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
6267
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop amazonrootca3 OCSP
68+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop amazonrootca3 OCSP
6369
* @run main/othervm -Djava.security.debug=certpath CAInterop amazonrootca3 CRL
6470
*/
6571

@@ -70,6 +76,7 @@
7076
* @library /test/lib
7177
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
7278
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop amazonrootca4 OCSP
79+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop amazonrootca4 OCSP
7380
* @run main/othervm -Djava.security.debug=certpath CAInterop amazonrootca4 CRL
7481
*/
7582

@@ -80,6 +87,7 @@
8087
* @library /test/lib
8188
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
8289
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop buypassclass2ca OCSP
90+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop buypassclass2ca OCSP
8391
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop buypassclass2ca CRL
8492
*/
8593

@@ -90,6 +98,7 @@
9098
* @library /test/lib
9199
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
92100
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop buypassclass3ca OCSP
101+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop buypassclass3ca OCSP
93102
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop buypassclass3ca CRL
94103
*/
95104

@@ -100,6 +109,7 @@
100109
* @library /test/lib
101110
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
102111
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop comodorsaca OCSP
112+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop comodorsaca OCSP
103113
* @run main/othervm -Djava.security.debug=certpath CAInterop comodorsaca CRL
104114
*/
105115

@@ -110,6 +120,7 @@
110120
* @library /test/lib
111121
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
112122
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop comodoeccca OCSP
123+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop comodoeccca OCSP
113124
* @run main/othervm -Djava.security.debug=certpath CAInterop comodoeccca CRL
114125
*/
115126

@@ -120,6 +131,7 @@
120131
* @library /test/lib
121132
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
122133
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop usertrustrsaca OCSP
134+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop usertrustrsaca OCSP
123135
* @run main/othervm -Djava.security.debug=certpath CAInterop usertrustrsaca CRL
124136
*/
125137

@@ -130,6 +142,7 @@
130142
* @library /test/lib
131143
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
132144
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop usertrusteccca OCSP
145+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop usertrusteccca OCSP
133146
* @run main/othervm -Djava.security.debug=certpath CAInterop usertrusteccca CRL
134147
*/
135148

@@ -140,6 +153,7 @@
140153
* @library /test/lib
141154
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
142155
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop letsencryptisrgx1 DEFAULT
156+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop letsencryptisrgx1 DEFAULT
143157
*/
144158

145159
/*
@@ -149,6 +163,7 @@
149163
* @library /test/lib
150164
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
151165
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop letsencryptisrgx2 DEFAULT
166+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop letsencryptisrgx2 DEFAULT
152167
*/
153168

154169
/*
@@ -158,6 +173,7 @@
158173
* @library /test/lib
159174
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
160175
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop globalsignrootcar6 OCSP
176+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop globalsignrootcar6 OCSP
161177
* @run main/othervm -Djava.security.debug=certpath CAInterop globalsignrootcar6 CRL
162178
*/
163179

@@ -168,6 +184,7 @@
168184
* @library /test/lib
169185
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
170186
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop entrustrootcaec1 OCSP
187+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop entrustrootcaec1 OCSP
171188
* @run main/othervm -Djava.security.debug=certpath CAInterop entrustrootcaec1 CRL
172189
*/
173190

@@ -178,6 +195,7 @@
178195
* @library /test/lib
179196
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
180197
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop entrustrootcag4 OCSP
198+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop entrustrootcag4 OCSP
181199
* @run main/othervm -Djava.security.debug=certpath CAInterop entrustrootcag4 CRL
182200
*/
183201

@@ -188,6 +206,7 @@
188206
* @library /test/lib
189207
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
190208
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop godaddyrootg2ca OCSP
209+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop godaddyrootg2ca OCSP
191210
* @run main/othervm -Djava.security.debug=certpath CAInterop godaddyrootg2ca CRL
192211
*/
193212

@@ -198,6 +217,7 @@
198217
* @library /test/lib
199218
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
200219
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop starfieldrootg2ca OCSP
220+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop starfieldrootg2ca OCSP
201221
* @run main/othervm -Djava.security.debug=certpath CAInterop starfieldrootg2ca CRL
202222
*/
203223

@@ -208,6 +228,7 @@
208228
* @library /test/lib
209229
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
210230
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop globalsigneccrootcar4 DEFAULT
231+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop globalsigneccrootcar4 DEFAULT
211232
*/
212233

213234
/*
@@ -217,6 +238,7 @@
217238
* @library /test/lib
218239
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
219240
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop gtsrootcar1 DEFAULT
241+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop gtsrootcar1 DEFAULT
220242
*/
221243

222244
/*
@@ -226,6 +248,7 @@
226248
* @library /test/lib
227249
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
228250
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop gtsrootcar2 DEFAULT
251+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop gtsrootcar2 DEFAULT
229252
*/
230253

231254
/*
@@ -235,6 +258,7 @@
235258
* @library /test/lib
236259
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
237260
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop gtsrootecccar3 DEFAULT
261+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop gtsrootecccar3 DEFAULT
238262
*/
239263

240264
/*
@@ -243,6 +267,7 @@
243267
* @summary Interoperability tests with Google's GlobalSign R4 and GTS Root certificates
244268
* @library /test/lib
245269
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
270+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop gtsrootecccar4 DEFAULT
246271
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop gtsrootecccar4 DEFAULT
247272
*/
248273

@@ -253,6 +278,7 @@
253278
* @library /test/lib
254279
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
255280
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop microsoftecc2017 OCSP
281+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop microsoftecc2017 OCSP
256282
* @run main/othervm -Djava.security.debug=certpath CAInterop microsoftecc2017 CRL
257283
*/
258284

@@ -263,6 +289,7 @@
263289
* @library /test/lib
264290
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
265291
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop microsoftrsa2017 OCSP
292+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop microsoftrsa2017 OCSP
266293
* @run main/othervm -Djava.security.debug=certpath CAInterop microsoftrsa2017 CRL
267294
*/
268295

@@ -273,6 +300,7 @@
273300
* @library /test/lib
274301
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
275302
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop quovadisrootca1g3 OCSP
303+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop quovadisrootca1g3 OCSP
276304
* @run main/othervm -Djava.security.debug=certpath CAInterop quovadisrootca1g3 CRL
277305
*/
278306

@@ -283,6 +311,7 @@
283311
* @library /test/lib
284312
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
285313
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop quovadisrootca2g3 OCSP
314+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop quovadisrootca2g3 OCSP
286315
* @run main/othervm -Djava.security.debug=certpath CAInterop quovadisrootca2g3 CRL
287316
*/
288317

@@ -293,6 +322,7 @@
293322
* @library /test/lib
294323
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
295324
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop quovadisrootca3g3 OCSP
325+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop quovadisrootca3g3 OCSP
296326
* @run main/othervm -Djava.security.debug=certpath CAInterop quovadisrootca3g3 CRL
297327
*/
298328

@@ -303,6 +333,7 @@
303333
* @library /test/lib
304334
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
305335
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop digicerttlseccrootg5 OCSP
336+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop digicerttlseccrootg5 OCSP
306337
* @run main/othervm -Djava.security.debug=certpath CAInterop digicerttlseccrootg5 CRL
307338
*/
308339

@@ -313,6 +344,7 @@
313344
* @library /test/lib
314345
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
315346
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop digicerttlsrsarootg5 OCSP
347+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop digicerttlsrsarootg5 OCSP
316348
* @run main/othervm -Djava.security.debug=certpath CAInterop digicerttlsrsarootg5 CRL
317349
*/
318350

@@ -323,6 +355,7 @@
323355
* @library /test/lib
324356
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
325357
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop sslrootrsaca OCSP
358+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop sslrootrsaca OCSP
326359
* @run main/othervm -Djava.security.debug=certpath CAInterop sslrootrsaca CRL
327360
*/
328361

@@ -333,6 +366,7 @@
333366
* @library /test/lib
334367
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
335368
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop sslrootevrsaca OCSP
369+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop sslrootevrsaca OCSP
336370
* @run main/othervm -Djava.security.debug=certpath CAInterop sslrootevrsaca CRL
337371
*/
338372

@@ -343,6 +377,7 @@
343377
* @library /test/lib
344378
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
345379
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop sslrooteccca OCSP
380+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop sslrooteccca OCSP
346381
* @run main/othervm -Djava.security.debug=certpath CAInterop sslrooteccca CRL
347382
*/
348383

@@ -353,6 +388,7 @@
353388
* @library /test/lib
354389
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
355390
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop teliasonerarootcav1 OCSP
391+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop teliasonerarootcav1 OCSP
356392
* @run main/othervm -Djava.security.debug=certpath CAInterop teliasonerarootcav1 CRL
357393
*/
358394

@@ -363,6 +399,7 @@
363399
* @library /test/lib
364400
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
365401
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop twcaglobalrootca OCSP
402+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop twcaglobalrootca OCSP
366403
* @run main/othervm -Djava.security.debug=certpath CAInterop twcaglobalrootca CRL
367404
*/
368405

@@ -373,6 +410,7 @@
373410
* @library /test/lib
374411
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
375412
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop certignarootca OCSP
413+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop certignarootca OCSP
376414
* @run main/othervm -Djava.security.debug=certpath CAInterop certignarootca CRL
377415
*/
378416

@@ -383,6 +421,7 @@
383421
* @library /test/lib
384422
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
385423
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop affirmtrustcommercialca OCSP
424+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop affirmtrustcommercialca OCSP
386425
* @run main/othervm -Djava.security.debug=certpath CAInterop affirmtrustcommercialca CRL
387426
*/
388427

@@ -393,6 +432,7 @@
393432
* @library /test/lib
394433
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
395434
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop affirmtrustnetworkingca OCSP
435+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop affirmtrustnetworkingca OCSP
396436
* @run main/othervm -Djava.security.debug=certpath CAInterop affirmtrustnetworkingca CRL
397437
*/
398438

@@ -403,6 +443,7 @@
403443
* @library /test/lib
404444
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
405445
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop affirmtrustpremiumca OCSP
446+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop affirmtrustpremiumca OCSP
406447
* @run main/othervm -Djava.security.debug=certpath CAInterop affirmtrustpremiumca CRL
407448
*/
408449

@@ -413,6 +454,7 @@
413454
* @library /test/lib
414455
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
415456
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop affirmtrustpremiumeccca OCSP
457+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop affirmtrustpremiumeccca OCSP
416458
* @run main/othervm -Djava.security.debug=certpath CAInterop affirmtrustpremiumeccca CRL
417459
*/
418460

@@ -423,6 +465,7 @@
423465
* @library /test/lib
424466
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
425467
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop teliarootcav2 OCSP
468+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop teliarootcav2 OCSP
426469
* @run main/othervm -Djava.security.debug=certpath CAInterop teliarootcav2 CRL
427470
*/
428471

@@ -433,6 +476,7 @@
433476
* @library /test/lib
434477
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
435478
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop emsignrootcag1 OCSP
479+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop emsignrootcag1 OCSP
436480
* @run main/othervm -Djava.security.debug=certpath CAInterop emsignrootcag1 CRL
437481
*/
438482

@@ -443,6 +487,7 @@
443487
* @library /test/lib
444488
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
445489
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop emsigneccrootcag3 OCSP
490+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop emsigneccrootcag3 OCSP
446491
* @run main/othervm -Djava.security.debug=certpath CAInterop emsigneccrootcag3 CRL
447492
*/
448493

@@ -453,6 +498,7 @@
453498
* @library /test/lib
454499
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
455500
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop certainlyrootr1 DEFAULT
501+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop certainlyrootr1 DEFAULT
456502
*/
457503

458504
/*
@@ -462,6 +508,7 @@
462508
* @library /test/lib
463509
* @build jtreg.SkippedException ValidatePathWithURL CAInterop
464510
* @run main/othervm -Djava.security.debug=certpath,ocsp CAInterop certainlyroote1 DEFAULT
511+
* @run main/othervm -Djava.security.debug=certpath,ocsp -Dcom.sun.security.ocsp.useget=false CAInterop certainlyroote1 DEFAULT
465512
*/
466513

467514
/**

1 commit comments

Comments
 (1)

openjdk-notifier[bot] commented on Apr 4, 2024

@openjdk-notifier[bot]
openjdk-notifier[bot]
on Apr 4, 2024

Review

Issues

This repository has been archived.