RFR: 8274471: Verification of OCSP Response signed with RSASSA-PSS fails

Weijun Wang weijun at openjdk.java.net
Fri Oct 1 01:49:35 UTC 2021


On Thu, 30 Sep 2021 23:15:33 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

> As throwing ProviderException is removed from initVerifyWithParam(), could we remove the ProviderException in the try-catch block from the callers of initVerifyWithParam()? For example, one of the callers at:
> https://github.com/openjdk/jdk/blob/master/src/java.base/share/classes/sun/security/pkcs/SignerInfo.java#L476

`ProviderException` is a `RuntimeException`, so removing it from the method signature does not mean the method will not throw it. Therefore, removing those catch blocks might lead to behavior changes. I'd rather not touch them.

-------------

PR: https://git.openjdk.java.net/jdk/pull/5778



More information about the security-dev mailing list