search

swamig / nhin-d

Automatically exported from code.google.com/p/nhin-d
0 stars 0 forks source link

Error during CRL decoding. #229

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Download a CRL in the Java RI signed with a large key.

What is the expected output? What do you see instead?
The RI should decode the CRL successfully into a collection of revocation 
entries.  Instead, it is throwing an exception indicating that the key is too 
large.

Original issue reported on code.google.com by gm2...@cerner.com on 27 Jan 2014 at 2:36

GoogleCodeExporter commented 9 years ago 
The issue has been attributed to the default JCE not being able to handle CRLs 
of this type.  To mitigate the issue, the certificate factory should be using 
the configured JCE provider.  The factory creation code is being modified to 
the following.

certificateFactory = CertificateFactory.getInstance("X.509", 
CryptoExtensions.getJCEProviderName());

Original comment by gm2...@cerner.com on 27 Jan 2014 at 2:37