RFR: 8243585: AlgorithmChecker::check throws confusing exception when it rejects the signer key [v3]

Weijun Wang weijun at openjdk.java.net
Thu Oct 21 13:06:09 UTC 2021


On Thu, 21 Oct 2021 12:06:39 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/provider/certpath/AlgorithmChecker.java line 363:
>> 
>>> 361:         // been specified.
>>> 362:         if (this.prevPubKey == null) {
>>> 363:             if (anchor == null) {
>> 
>> This won't happen. Or, you can ignore it.
>> 
>> This makes it possible to call this method in the constructor.
>
> Ok, will remove. But I will keep this method separate since, unlike the ctor it needs to check if `trustedPubKey` is `null` before setting the `prevPubKey`.

OK, but in the ctor `trustedPubKey` is also null.

-------------

PR: https://git.openjdk.java.net/jdk/pull/5928



More information about the security-dev mailing list