Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4111951

PKCS #7 OIDS incorrect ... code signing not interoperable

    XMLWordPrintable

    Details

      Description

      IBM has reported that PKCS #7 OIDs are not correct and hence the code signing
      is not working.

      This bug was fixed in 1.2 alpha2 under the bug number # 4044236.

      Also there was one more related bug # 4058192 which caused the Signature
      block to be in wrong format. This bug was also fixed in 1.2 alpha2.

      The purpose of this bug is to back port those two fixes in to 1.1.6 or 1.1.7
      so that IBM will be happy.

      Here is the email from IBM:
      The sun.security.pkcs.PKCS7 is comparing the signedData OBJECT IDENTIFIER
      against ContentInfo.SIGNED_DATA_OID ::= 1.2.840.1113549.1.7.2 (set in
      sun.security.pkcs.ContentInfo).
      All the other Object identifiers set in ContentInfo have the same problem
      (incorrect rsadsi).

      Conform with "PKCS #7: Cryptographic Message Syntax Standard " (
      ftp://ftp.rsa.com/pub/pkcs/ascii/pkcs-7.asc)
      pkcs-7 OBJECT IDENTIFIER ::= { iso(1) member-body(2) US(840) rsadsi(113549
      ) pkcs(1) 7 }
      data OBJECT IDENTIFIER ::= { pkcs-7 1 }
      signedData OBJECT IDENTIFIER ::= { pkcs-7 2 }
      envelopedData OBJECT IDENTIFIER ::= { pkcs-7 3 }
      signedAndEnvelopedData OBJECT IDENTIFIER ::=
        { pkcs-7 4 }
      digestedData OBJECT IDENTIFIER ::= { pkcs-7 5 }
      encryptedData OBJECT IDENTIFIER ::= { pkcs-7 6 }



        Attachments

          Issue Links

            Activity

              People

              Assignee:
              hprafullsunw Hemlata Prafullchandra (Inactive)
              Reporter:
              sndodda Satya Dodda
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: