Details
-
Type:
Bug
-
Status: Closed
-
Priority:
P1
-
Resolution: Fixed
-
Affects Version/s: 8
-
Fix Version/s: 8
-
Component/s: security-libs
-
Subcomponent:
-
Resolved In Build:b122
-
CPU:generic
-
OS:generic
-
Verification:Verified
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8030713 | 9 | Vincent Ryan | P1 | Closed | Fixed | b01 |
JDK-8031272 | 8u5 | Vincent Ryan | P1 | Resolved | Fixed | b03 |
JDK-8193962 | openjdk7u | Andrew Hughes | P1 | Resolved | Fixed | master |
Description
It appears to be a regression in JRE8-b119 as signed applet failed to load due to certificate validation failure.
The issue caused by java.lang.ClassCastException: com.sun.deploy.security.X509CertificateWrapper cannot be cast to sun.security.x509.X509CertImpl
The same applet loaded fine if using JRE8-b118
*** Tested Configurations
- x86 Win7
- IE 9, FF 25 ,GC 31
- jre 8-b118, b119
*** Steps to reproduce:
0) Install jre 8-b119
1) Enable the certificate revocation checks by default
2) Use any browser to load the signed test applet:
http://www.oxygenxml.com/demo/AuthorDemoApplet/author-component-dita.html
Wait for applet resources to download and at the end, if you see the certificate validation failed due to java.lang.ClassCastException: com.sun.deploy.security.X509CertificateWrapper cannot be cast to sun.security.x509.X509CertImpl, the issue is reproducible
The problem does not occur if using jre 8-b118
Attachments
Issue Links
- backported by
-
JDK-8031272 Certificate validation - java.lang.ClassCastException
-
- Resolved
-
-
JDK-8193962 Certificate validation - java.lang.ClassCastException
-
- Resolved
-
-
JDK-8030713 Certificate validation - java.lang.ClassCastException
-
- Closed
-
- duplicates
-
JDK-8030990 Cannot start applet signed with VeriSign certificate
-
- Resolved
-
-
JDK-8030699 com.sun.deploy.security.X509CertificateWrapper cannot be cast to sun.security.x509.X509CertImpl
-
- Resolved
-
- relates to
-
JDK-8015571 OCSP validation fails if ocsp.responderCertSubjectName is set
-
- Resolved
-
(1 relates to)