Re: custom critical X509v3 extensions

2015-03-31 Thread Xuelei Fan
What's the requirements for the customization? If required, alternatively, developer can customize the trust manager instead. Xuelei On 3/24/2015 8:53 PM, Jan Willem Janssen wrote: > Hi, > > When a X509TrustManager validates an endpoint certificate containing a > critical custom extension the s

Re: custom critical X509v3 extensions

2015-03-25 Thread Jan Willem Janssen
> On 24 Mar 2015, at 14:12, Sean Mullan wrote: > > On 03/24/2015 08:53 AM, Jan Willem Janssen wrote: >> >> When a X509TrustManager validates an endpoint certificate containing a >> critical custom extension the sun.security.validator.EndEntityChecker >> will always fail. While this is correct b

Re: custom critical X509v3 extensions

2015-03-24 Thread Sean Mullan
On 03/24/2015 08:53 AM, Jan Willem Janssen wrote: Hi, When a X509TrustManager validates an endpoint certificate containing a critical custom extension the sun.security.validator.EndEntityChecker will always fail. While this is correct behaviour, and according to the spec, there appears no way of

custom critical X509v3 extensions

2015-03-24 Thread Jan Willem Janssen
Hi, When a X509TrustManager validates an endpoint certificate containing a critical custom extension the sun.security.validator.EndEntityChecker will always fail. While this is correct behaviour, and according to the spec, there appears no way of adding support for custom critical extensions on en