RFR: 8264554: X509KeyManagerImpl calls getProtectionParameter with incorrect alias
Xue-Lei Andrew Fan
xuelei at openjdk.java.net
Mon Apr 5 23:50:26 UTC 2021
On Fri, 2 Apr 2021 16:38:14 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:
> In X509KeyManagerImpl.java, a composited entry alias consists three parts: an UID counter, a builder index and the real entry alias (See the makeAlias() method). While calling the KeyStore.Builder.getProtectionParameter(String alias) method, the real entry alias should be used instead, rather than the composited entry alias.
>
> Simple and straightforward update, no new regression test.
ping ...
-------------
PR: https://git.openjdk.java.net/jdk/pull/3326
More information about the security-dev
mailing list