RE: Browser's accepting certificates that Java does not

2020-07-08 Thread Mark A. Claassen
Message- From: net-dev On Behalf Of Sean Mullan Sent: Wednesday, July 8, 2020 9:38 AM To: Bernd Eckenfels ; OpenJDK Cc: net-dev@openjdk.java.net Subject: Re: Browser's accepting certificates that Java does not Also, in case you did not know, the JDK "PKIX" CertPathBuilder impleme

Re: Browser's accepting certificates that Java does not

2020-07-08 Thread Sean Mullan
penJDK *Cc:* net-dev@openjdk.java.net *Betreff:* Re: Browser's accepting certificates that Java does not Hi Mark, This is probably a question for the security-dev mailing list, which I have put in the to: of my reply. best regards, -- daniel On 07/07/2020 20:24, Mark A. Claassen wrote:

Re: Browser's accepting certificates that Java does not

2020-07-08 Thread Bernd Eckenfels
/bernd.eckenfels.net Von: security-dev im Auftrag von Daniel Fuchs Gesendet: Wednesday, July 8, 2020 11:09:26 AM An: Mark A. Claassen ; OpenJDK Cc: net-dev@openjdk.java.net Betreff: Re: Browser's accepting certificates that Java does not Hi Mark, This is probably a question for the

Re: Browser's accepting certificates that Java does not

2020-07-08 Thread Daniel Fuchs
Hi Mark, This is probably a question for the security-dev mailing list, which I have put in the to: of my reply. best regards, -- daniel On 07/07/2020 20:24, Mark A. Claassen wrote: I was curious if there has been any thought to allowing accessing to other certificate stores in Windows besid

Browser's accepting certificates that Java does not

2020-07-07 Thread Mark A. Claassen
I was curious if there has been any thought to allowing accessing to other certificate stores in Windows besides the "Trusted Root Certification Authorities" and the "Personal" ones. It seems like web servers omitting intermediate certificates in the certificate chain is pretty common. Browser