Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8154015

Apply algorithm constraints to timestamped code

    Details

    • Subcomponent:
    • Resolved In Build:
      b127
    • Verification:
      Verified

      Backports

        Description

        Code that is timestamped before a certain date may need to be treated differently for restricted algorithms. For example, code that was timestamped before an algorithm was considered too weak to use may still be acceptable.

        When enforcing restrictions, we should check if the certificate's EKU includes code signing and also check if the timestamp is before or after a certain date.

          Issue Links

            Activity

            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/8150edf90095
            User: ascarpino
            Date: 2016-07-05 22:37:54 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/8150edf90095 User: ascarpino Date: 2016-07-05 22:37:54 +0000
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/8150edf90095
            User: amurillo
            Date: 2016-07-08 20:16:54 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/8150edf90095 User: amurillo Date: 2016-07-08 20:16:54 +0000
            Hide
            afomin Alexander Fomin (Inactive) added a comment -
            This one should be backported as well - JDK-8157042, right?
            Show
            afomin Alexander Fomin (Inactive) added a comment - This one should be backported as well - JDK-8157042, right?
            Hide
            ascarpino Anthony Scarpino added a comment -
            Yes
            Show
            ascarpino Anthony Scarpino added a comment - Yes
            Hide
            afomin Alexander Fomin (Inactive) added a comment - - edited
            UR SQE OK to take this one into 17_01 together with JDK-8157042 and JDK-8164918.
            Show
            afomin Alexander Fomin (Inactive) added a comment - - edited UR SQE OK to take this one into 17_01 together with JDK-8157042 and JDK-8164918.

              People

              • Assignee:
                ascarpino Anthony Scarpino
                Reporter:
                mullan Sean Mullan
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Due:
                  Created:
                  Updated:
                  Resolved: