Details

Type: Enhancement

Status: Closed

Priority: P2

Resolution: Fixed

Affects Version/s: None

Fix Version/s: 9

Component/s: securitylibs

Subcomponent:

Resolved In Build:b127

Verification:Verified
Backports
Issue  Fix Version  Assignee  Priority  Status  Resolution  Resolved In Build 

JDK8197114  8u192  Robert Mckenna  P2  Resolved  Fixed  b01 
JDK8195340  8u172  Robert Mckenna  P2  Resolved  Fixed  b03 
JDK8190055  8u162  Robert Mckenna  P2  Resolved  Fixed  b04 
JDK8167597  8u161  Robert Mckenna  P2  Resolved  Fixed  b01 
JDK8176536  8u152  Anthony Scarpino  P2  Resolved  Fixed  b02 
JDK8182213  8u151  Unassigned  P2  Closed  Fixed  b01 
JDK8171741  8u141  Robert Mckenna  P2  Closed  Won't Fix  
JDK8171563  8u131  Robert Mckenna  P2  Closed  Won't Fix  
JDK8154571  8u121  Robert Mckenna  P3  Closed  Won't Fix  
JDK8192305  emb8u161  Robert Mckenna  P2  Resolved  Fixed  b01 
JDK8184624  emb8u151  Unassigned  P2  Resolved  Fixed  b01 
JDK8178645  emb8u141  Unassigned  P2  Resolved  Fixed  b01 
JDK8173527  emb8u131  Unassigned  P2  Resolved  Fixed  b01 
JDK8168671  emb8u121  Gary Adams  P2  Closed  Won't Fix  b01 
JDK8188472  7u171  Unassigned  P2  Resolved  Fixed  b01 
JDK8182222  7u161  Unassigned  P2  Resolved  Fixed  b01 
JDK8171686  7u151  Robert Mckenna  P2  Resolved  Fixed  b01 
JDK8167598  7u141  Robert Mckenna  P2  Closed  Won't Fix  
JDK8154572  7u131  Robert Mckenna  P3  Closed  Won't Fix  
JDK8188381  6u181  Unassigned  P2  Resolved  Fixed  b01 
JDK8182238  6u171  Unassigned  P2  Resolved  Fixed  b01 
JDK8171774  6u161  Robert Mckenna  P2  Resolved  Fixed  b01 
JDK8167601  6u151  Robert Mckenna  P2  Closed  Won't Fix  
JDK8154573  6u141  Robert Mckenna  P3  Closed  Won't Fix 
Description
When enforcing restrictions, we should check if the certificate's EKU includes code signing and also check if the timestamp is before or after a certain date.
Attachments
Issue Links
 backported by

JDK8176536 Improved algorithm constraints checking
 Resolved

JDK8167597 Apply algorithm constraints to timestamped code
 Resolved

JDK8169164 Apply algorithm constraints to timestamped code
 Resolved

JDK8171686 Apply algorithm constraints to timestamped code
 Resolved

JDK8171774 Apply algorithm constraints to timestamped code
 Resolved

JDK8173527 Apply algorithm constraints to timestamped code
 Resolved

JDK8178645 Apply algorithm constraints to timestamped code
 Resolved

JDK8182222 Apply algorithm constraints to timestamped code
 Resolved

JDK8182238 Apply algorithm constraints to timestamped code
 Resolved

JDK8184624 Apply algorithm constraints to timestamped code
 Resolved

JDK8188381 Apply algorithm constraints to timestamped code
 Resolved

JDK8188472 Apply algorithm constraints to timestamped code
 Resolved

JDK8190055 Apply algorithm constraints to timestamped code
 Resolved

JDK8192305 Apply algorithm constraints to timestamped code
 Resolved

JDK8195340 Apply algorithm constraints to timestamped code
 Resolved

JDK8197114 Apply algorithm constraints to timestamped code
 Resolved

JDK8167598 Apply algorithm constraints to timestamped code
 Closed

JDK8167601 Apply algorithm constraints to timestamped code
 Closed

JDK8168671 Apply algorithm constraints to timestamped code
 Closed

JDK8171563 Apply algorithm constraints to timestamped code
 Closed

JDK8171741 Apply algorithm constraints to timestamped code
 Closed

JDK8182213 Apply algorithm constraints to timestamped code
 Closed

JDK8154571 Apply algorithm constraints to timestamped code
 Closed

JDK8154572 Apply algorithm constraints to timestamped code
 Closed

JDK8154573 Apply algorithm constraints to timestamped code
 Closed
 blocks

JDK8153778 Implement timestamp check
 Closed

JDK8149555 JEP 288: Disable SHA1 Certificates
 Closed
 relates to

JDK8160655 Fix denyAfter and usage types for security properties
 Closed