RFR: 8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property

Anthony Scarpino anthony.scarpino at oracle.com
Mon Nov 21 22:43:32 UTC 2016


On 11/21/2016 01:09 PM, Sean Mullan wrote:
> Please review this fix for a bug where certificates were not being
> blocked if the algorithm is only listed in the
> jdk.tls.disabledAlgorithms property and not the
> jdk.certpath.disabledAlgorithms property.
>
> I have modified an existing regression test to test this functionality
> as there was no previous test for this feature.
>
> webrev: http://cr.openjdk.java.net/~mullan/webrevs/8170131/webrev.00/
> bug: https://bugs.openjdk.java.net/browse/JDK-8170131
>
> --Sean

Is the reason the if() is needed is 
constraints.permit(CerttConstraintParameters) is not in the 
SSLAlgorithmConstraints class and the method exception is suppressed?

Tony




More information about the security-dev mailing list