[jdk11u-dev] RFR: 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension

[Antonio Vieiro]

On Mon, 23 Feb 2026 16:52:15 GMT, Antonio Vieiro <avieiro at openjdk.org> wrote:

> Clean backport of [JDK-8355779](https://bugs.openjdk.org/browse/JDK-8355779) as a follow-up of [JDK-8349583](https://bugs.openjdk.org/browse/JDK-8349583) on #3130.
> 
> Security tests pass:
> 
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk:jdk_security                        1366  1366     0     0   
> ==============================
> TEST SUCCESS

There're intermitent test failures, under investigation.


java.lang.ExceptionInInitializerError
	at PKCS11Test.fetchNssLib(PKCS11Test.java:841)
	at PKCS11Test.getNSSLibPath(PKCS11Test.java:385)
	at PKCS11Test.getNSSLibPath(PKCS11Test.java:379)
	at PKCS11Test.getNSSInfo(PKCS11Test.java:489)
	at PKCS11Test.getNSSInfo(PKCS11Test.java:466)
	at PKCS11Test.getNSSECC(PKCS11Test.java:448)
	at TestECDSA.main(TestECDSA.java:159)
	at TestEC.main0(TestEC.java:103)
	at TestEC.main(TestEC.java:81)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base/java.lang.reflect.Method.invoke(Method.java:566)
	at com.sun.javatest.regtest.agent.MainWrapper$MainTask.run(MainWrapper.java:138)
	at java.base/java.lang.Thread.run(Thread.java:829)
Caused by: java.security.AccessControlException: access denied ("java.util.PropertyPermission" "java.vm.info" "read")
	at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:472)
	at java.base/java.security.AccessController.checkPermission(AccessController.java:897)
	at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:322)
	at java.base/java.lang.SecurityManager.checkPropertyAccess(SecurityManager.java:1066)
	at java.base/java.lang.System.getProperty(System.java:830)
	at jdk.test.lib.Platform.lambda$privilegedGetProperty$0(Platform.java:56)
	at java.base/java.security.AccessController.doPrivileged(Native Method)
	at jdk.test.lib.Platform.privilegedGetProperty(Platform.java:55)
	at jdk.test.lib.Platform.<clinit>(Platform.java:41)
	... 15 more

Retested, all good. It might have been a local misconfiguration. Good to go.


==============================
Test summary
==============================
   TEST                                              TOTAL  PASS  FAIL ERROR   
   jtreg:test/jdk:jdk_security                        1366  1366     0     0   
==============================
TEST SUCCESS

-------------

PR Comment: https://git.openjdk.org/jdk11u-dev/pull/3161#issuecomment-3946092008
PR Comment: https://git.openjdk.org/jdk11u-dev/pull/3161#issuecomment-3950025397