archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-27 14:54:52 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

8329213: Better validation for com.sun.security.ocsp.useget option

Browse source 
Reviewed-by: mullan
This commit is contained in:
Aleksey Shipilev 2024-04-01 17:27:00 +00:00
parent 9f5464ee95
commit 4a14cba2f1
4 changed files with 48 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

33
src/java.base/share/classes/sun/security/action/GetPropertyAction.java
View file

@ -224,4 +224,37 @@ public class GetPropertyAction implements PrivilegedAction<String> {
return def;
}
}
/**
* Convenience method for fetching System property values that are booleans.
*
* @param prop the name of the System property
* @param def a default value
* @param dbg a Debug object, if null no debug messages will be sent
*
* @return a boolean value corresponding to the value in the System property.
* If the property value is neither "true" or "false", the default value
* will be returned.
*/
public static boolean privilegedGetBooleanProp(String prop, boolean def, Debug dbg) {
String rawPropVal = privilegedGetProperty(prop, "");
if ("".equals(rawPropVal)) {
return def;
}
String lower = rawPropVal.toLowerCase(Locale.ROOT);
if ("true".equals(lower)) {
return true;
} else if ("false".equals(lower)) {
return false;
} else {
if (dbg != null) {
dbg.println("Warning: Unexpected value for " + prop +
": " + rawPropVal +
". Using default value: " + def);
}
return def;
}
}
}

8
src/java.base/share/classes/sun/security/provider/certpath/OCSP.java
View file

@ -105,7 +105,7 @@ public final class OCSP {
* problems.
*/
private static final boolean USE_GET = initializeBoolean(
"com.sun.security.ocsp.useget", "true");
"com.sun.security.ocsp.useget", true);
/**
* Initialize the timeout length by getting the OCSP timeout
@ -121,9 +121,9 @@ public final class OCSP {
return timeoutVal;
}
private static boolean initializeBoolean(String prop, String def) {
String flag = GetPropertyAction.privilegedGetProperty(prop, def);
boolean value = Boolean.parseBoolean(flag);
private static boolean initializeBoolean(String prop, boolean def) {
boolean value =
GetPropertyAction.privilegedGetBooleanProp(prop, def, debug);
if (debug != null) {
debug.println(prop + " set to " + value);
}