git: openjdk/jdk: master: 8365820: Apply certificate scope constraints to algorithms in "signature_algorithms" extension when "signature_algorithms_cert" extension is not being sent

[Artur Barashev]

Changeset: 569e7808
Branch: master
Author:    Artur Barashev <abarashev at openjdk.org>
Date:      2025-09-25 14:44:06 +0000
URL:       https://git.openjdk.org/jdk/commit/569e78080b3c25c95d85e9e194626f95f86b9b10

8365820: Apply certificate scope constraints to algorithms in "signature_algorithms" extension when "signature_algorithms_cert" extension is not being sent

Reviewed-by: hchao

! src/java.base/share/classes/sun/security/ssl/CertSignAlgsExtension.java
! src/java.base/share/classes/sun/security/ssl/SignatureAlgorithmsExtension.java
+ test/jdk/sun/security/ssl/SignatureScheme/DisableCertSignAlgsExtForClientTLS12.java
+ test/jdk/sun/security/ssl/SignatureScheme/DisableCertSignAlgsExtForClientTLS13.java
+ test/jdk/sun/security/ssl/SignatureScheme/DisableCertSignAlgsExtForServerTLS13.java
! test/jdk/sun/security/ssl/SignatureScheme/DisableSignatureSchemePerScopeTLS12.java
! test/jdk/sun/security/ssl/SignatureScheme/DisableSignatureSchemePerScopeTLS13.java