RFR: 8271199: Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key

Alexey Bakhtin abakhtin at openjdk.java.net
Fri Aug 20 13:51:28 UTC 2021


On Fri, 23 Jul 2021 10:33:14 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

> Hello,
> 
> Could you please review the small patch for the issue described in JDK-8271199: Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key
> 
> I suggest updating the RSAPSSSignature.isValid() method to verify if provided key components can be applied to SunRSASign implementation. 
> If not applied, implementation can try to select signer from other providers
> 
> Regards
> Alexey

Gentle ping

-------------

PR: https://git.openjdk.java.net/jdk/pull/4887



More information about the security-dev mailing list