Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7167988

PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: P4
    • Resolution: Fixed
    • Affects Version/s: 7
    • Fix Version/s: 8
    • Component/s: security-libs
    • Labels:
      None
    • Subcomponent:
    • Resolved In Build:
      b40
    • CPU:
      generic
    • OS:
      generic
    • Verification:
      Verified

      Backports

        Description

        I don't know how long this hasn't worked, but a PKIX CertPathBuilder in reverse mode (building from root to target) does not work if you specify more than one trust anchor in the PKIXBuilderParameters. You must only specify the correct trust anchor.

        This was probably never discovered because the reverse mode is not supported via the public API.

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                xuelei Xue-Lei Fan
                Reporter:
                mullan Sean Mullan
                Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved:
                  Imported:
                  Indexed: