[jdk17u-dev] RFR: 8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints
Paul Hohensee
phh at openjdk.org
Thu Oct 13 20:48:19 UTC 2022
On Thu, 13 Oct 2022 17:19:45 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:
> I backport this for parity with 17.0.6-oracle.
>
> The change applies clean.
>
> But I had to adapt the calls to CertPathConstraintsParameters(Key, ...)
> In 17, it has only three arguments, since 18 it has four.
> The fourth argument was added in "JDK-8243585: AlgorithmChecker::check
> throws confusing exception when it rejects the signer key"
Lgtm.
-------------
Marked as reviewed by phh (Reviewer).
PR: https://git.openjdk.org/jdk17u-dev/pull/789
More information about the jdk-updates-dev
mailing list