Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8004846

Time-specific certpath validation applies to OCSP response validity period

    Details

    • Introduced In Version:
    • Resolved In Build:
      b08
    • Verification:
      Verified

      Backports

        Description

        PKIX certpath validation is normally performed using the current time.
        It may also be requested to be performed at a specific time.

        When validating a certpath using a specified time then the OCSP response
        shall be checked using that time, rather than using the current time.

        Specifically, the specified time should be used when validating the
        OCSP response's thisUpdate and nextUpdate, rather than the current time.

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  vinnie Vincent Ryan
                  Reporter:
                  vinnie Vincent Ryan
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: