[14] RFR: 8233228: Support named curves for all disabledAlgorithms

Sean Mullan sean.mullan at oracle.com
Tue Dec 10 19:10:44 UTC 2019


On 12/9/19 1:04 PM, Anthony Scarpino wrote:
> I've updated the webrev to address many of the comments.  In particular 
> adding checks when keys given directly.  Also, the changing from 
> legacyEC hardcoded list to a security property jdk.disabled.namedCurves.
> 
> https://cr.openjdk.java.net/~ascarpino/8233228/webrev.01/


* ConstraintsParameters.java

- minor, but toString() could use a StringBuilder to avoid extra String 
allocations.

* DisabledAlgorithmConstraints.java

107             if (s.compareToIgnoreCase(PROPERTY_DISABLED_EC_CURVES) 
== 0) {

or just use s.equalsCaseIgnore() instead.

--Sean





More information about the security-dev mailing list