RFR: 8278099: two sun/security/pkcs11/Signature tests failed with AssertionError

Weijun Wang weijun at openjdk.java.net
Thu Dec 2 01:46:27 UTC 2021


On Thu, 2 Dec 2021 01:20:30 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

> Can someone help reviewing this trivial one-line fix? The assert check in CK_MECHANISM.java is too strict and fail unexpectedly when digest-specific PSS signature mechanisms are supported by the underlying PKCS#11 library. The fix is to remove this assert check. No new regression test added with this fix as this is already covered by existing regression tests.
> 
> Thanks,
> Valerie

Not a PKCS11 expert, but does a "digest-specific PSS signature mechanism" needs `setParameter` anymore? Or, must it be the same as the existing parameters dictated by the specified digest?

-------------

PR: https://git.openjdk.java.net/jdk/pull/6656



More information about the security-dev mailing list