[jdk11u-dev] RFR: 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension

[Severin Gehwolf]

On Mon, 23 Feb 2026 16:52:15 GMT, Antonio Vieiro <avieiro at openjdk.org> wrote:

> Clean backport of [JDK-8355779](https://bugs.openjdk.org/browse/JDK-8355779) as a follow-up of [JDK-8349583](https://bugs.openjdk.org/browse/JDK-8349583) on #3130.
> 
> Security tests pass:
> 
> 
> ==============================
> Test summary
> ==============================
>    TEST                                              TOTAL  PASS  FAIL ERROR   
>    jtreg:test/jdk:jdk_security                        1366  1366     0     0   
> ==============================
> TEST SUCCESS

Confirmed clean.

-------------

Marked as reviewed by sgehwolf (Reviewer).

PR Review: https://git.openjdk.org/jdk11u-dev/pull/3161#pullrequestreview-3853176153