[9] request for review 8046777: apple.security.KeychainStore has a problem searching for identities
Sean Mullan
sean.mullan at oracle.com
Mon Nov 10 16:50:02 UTC 2014
A few comments:
* KeystoreImpl.m
- it is odd to have a comment embedded in the parameter list and makes
the line very long. Can you move this comment above the call?
- update copyright year
* KeychainStore.java
297-304 I think it would be cleaner to write these lines as:
} else {
KeyEntry ke = (KeyEntry)entry;
if (ke.chain == null || ke.chain.length == 0) {
return null;
}
return ke.chain[0];
}
623-629 similar comment as above
* ListKeychainStore.sh
# See JDK-8046777
123,166: No need to add this comment, @bug label and source code history
is sufficient.
156 if [ $RECOUNT -lt `expr $COUNT + 3 + 1` ]; then
change to $COUNT + 4
157 echo "Error: expected >=4 private key entries in the Keychain
keystores"
$COUNT is the number of private keys in the keystore before testing, so
original code is still correct: "expected >$COUNT"
--Sean
On 10/29/2014 07:48 PM, Vincent Ryan wrote:
> Please review this fix contributed by David Kocher.
>
> It corrects an issue in the Keychain keystore implementation for Mac OS where private keys
> configured with a key usage other than ‘any’ are not retrieved.
>
> Bug: https://bugs.openjdk.java.net/browse/JDK-8046777
> Webrev: http://cr.openjdk.java.net/~vinnie/8046777/webrev.00/
>
> Thanks.
>
More information about the security-dev
mailing list