[jdk8u-dev] RFR: 8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names

[Alexey Bakhtin]

On Tue, 25 Feb 2025 20:10:34 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

> I backport this for parity with Oracle 8u351
> Almost clean backport except for DNSName.java: 
> small manual merge in the constructor caused by the absence of "JDK-8215281: Use String.isEmpty() when applicable in java.base"
> 
> All sun/security/x509 and sun/security/tools/keytool JTREG tests passed

Please review.
CI failures in CAInterop test are not related to the proposed changes

-------------

PR Comment: https://git.openjdk.org/jdk8u-dev/pull/629#issuecomment-2722351183