Please review a new test at http://cr.openjdk.java.net/~weijun/8044755/webrev.00/ It makes sure the CertPath validation check in jarsigner matches the algorithm constraints check on key sizes. Thanks Max