[jdk17u-dev] RFR: 8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints

[Paul Hohensee]

On Thu, 13 Oct 2022 17:19:45 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

> I backport this for parity with 17.0.6-oracle.
> 
> The change applies clean.
> 
> But I had to adapt the calls to CertPathConstraintsParameters(Key, ...)
> In 17, it has only three arguments, since 18 it has four.
> The fourth argument was added in "JDK-8243585: AlgorithmChecker::check
> throws confusing exception when it rejects the signer key"

Lgtm.

-------------

Marked as reviewed by phh (Reviewer).

PR: https://git.openjdk.org/jdk17u-dev/pull/789