Re: RFR 8237858: PlainSocketImpl.socketAccept() handles EINTR incorrectly

2020-07-08 Thread Patrick Concannon
Hi, No problem. I ran our tests against your latest patch, and everything passed. Thanks Vyom. Kind regards, Patrick > On 8 Jul 2020, at 06:49, Vyom Tiwari wrote: > > Hi Patrick, > Thanks for testing, please find the latest > webrev(http://cr.openjdk.java.net/~vtewari/8237858/webrev1.0/in

RE: Browser's accepting certificates that Java does not

2020-07-08 Thread Mark A. Claassen
Wow. Thank you so much! I need to read this all more thoroughly. I really appreciate the suggestions and the help getting this on the correct mailing list. Mark Claassen Senior Software Engineer Donnell Systems, Inc. 130 South Main Street Leighton Plaza Suite 375 South Bend, INĀ  46601 E-mail

Re: Browser's accepting certificates that Java does not

2020-07-08 Thread Sean Mullan
Also, in case you did not know, the JDK "PKIX" CertPathBuilder implementation (which is also the default used by the JSSE TrustManager) supports retrieving certificates via the AIA extension, but it is disabled by default. To enable it, set the "com.sun.security.enableAIAcaIssuers" system prope

Re: Browser's accepting certificates that Java does not

2020-07-08 Thread Bernd Eckenfels
Note that many browsers also download certs from the AIA and even "well known" mechanisms. It won't help to access more truststores, that would be a function you need to prove directly. Also the dynamic installation from Windows Updates or offline from crypt32.dll is not triggered when only brow

Re: Browser's accepting certificates that Java does not

2020-07-08 Thread Daniel Fuchs
Hi Mark, This is probably a question for the security-dev mailing list, which I have put in the to: of my reply. best regards, -- daniel On 07/07/2020 20:24, Mark A. Claassen wrote: I was curious if there has been any thought to allowing accessing to other certificate stores in Windows besid