RFR: 8274471: Verification of OCSP Response signed with RSASSA-PSS fails
Weijun Wang
weijun at openjdk.java.net
Fri Oct 1 01:49:35 UTC 2021
On Thu, 30 Sep 2021 23:15:33 GMT, Hai-May Chao <hchao at openjdk.org> wrote:
> As throwing ProviderException is removed from initVerifyWithParam(), could we remove the ProviderException in the try-catch block from the callers of initVerifyWithParam()? For example, one of the callers at:
> https://github.com/openjdk/jdk/blob/master/src/java.base/share/classes/sun/security/pkcs/SignerInfo.java#L476
`ProviderException` is a `RuntimeException`, so removing it from the method signature does not mean the method will not throw it. Therefore, removing those catch blocks might lead to behavior changes. I'd rather not touch them.
-------------
PR: https://git.openjdk.java.net/jdk/pull/5778
More information about the security-dev
mailing list