RFR: 8349759: Fix CertificateBuilder and SimpleOCSPServer test utilities to support PQC algorithms [v4]
Jamil Nimeh
jnimeh at openjdk.org
Thu Feb 20 01:12:46 UTC 2025
> This fix makes some minor changes to the internals of the `CertificateBuilder` and `SimpleOCSPServer` test classes. They would break when ML-DSA was selected as key and signing algorithms. Also RSASSA-PSS works better now with these changes. I've also taken this opportunity to do some cleanup on CertificateBuilder and added a method which uses a default signing algorithm based on the key, so the `build()` method no longer needs to provide that algorithm (though one can if they wish for things like RSA signatures if they want a different message digest in the signature).
Jamil Nimeh has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains five additional commits since the last revision:
- Add more descriptive summary to test
- Merge with main
- Remove unnecessary throws declarations
- Fix JBS ID and summary in test
- 8349759: Fix CertificateBuilder and SimpleOCSPServer test utilities to support PQC algorithms
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/23566/files
- new: https://git.openjdk.org/jdk/pull/23566/files/d0c95035..f39d0e83
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=23566&range=03
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=23566&range=02-03
Stats: 18126 lines in 881 files changed: 12702 ins; 2531 del; 2893 mod
Patch: https://git.openjdk.org/jdk/pull/23566.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/23566/head:pull/23566
PR: https://git.openjdk.org/jdk/pull/23566
More information about the core-libs-dev
mailing list