On 03/17/2015 11:02 AM, Wang Weijun wrote: > Hi All > > Please review the code change at > > http://cr.openjdk.java.net/~weijun/8074935/webrev.00/ > > In jdk8, we use Base64.getMimeDecoder() to parse PEM-encoded certs and it > ignores every character not in the base-64 alphabet. PEM is more restricted > and as I know openssl rejects PEM with illegal chars (Ex, "!" as in bug > report and test). This fix will also reject them.
Shouldn't you add a Base64.getPemDecoder() with these semantics? I think this decoder would be useful in other contexts as well. -- Florian Weimer / Red Hat Product Security