bug report:
http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7182500
webrev:
http://cr.openjdk.java.net/~vinnie/7182500/
code review:
http://mail.openjdk.java.net/pipermail/security-dev/2012-July/005138.html
This regression is a showstopper bug and should be fixed in 7u6 because
it prevents the successful validation of public key certificates using
OCSP.
The fix is a low-risk, isolated, one-line change to an internal class in
the sun.security package. I have verified my fix using the testcase
identified in the bug report.
Thanks.