[jdk21u-dev] RFR: 8311546: Certificate name constraints improperly validated with leading period

[Aleksey Shipilev]

On Thu, 9 Jan 2025 12:51:52 GMT, Volker Simonis <simonis at openjdk.org> wrote:

> Looks good.

Thanks!

> Just for my education: is it now common/recommended to bundle several downports into a single PR? From my memory (which might be outdated) we used dependent PRs for that purpose. The latter is obviously more complicated and work intensive so I'll probably follow your style in the future if that's OK?

I think we prefer multi-issue backports if we know there are breakages that are fixed by follow-up changes. This would introduce an atomic commit that would transit the repository from a good state to a good state, without exposing any known bad state in between. This is both cleaner and more convenient for eventual bisects.

-------------

PR Comment: https://git.openjdk.org/jdk21u-dev/pull/1268#issuecomment-2580089094