RFR: 8271199: Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key [v3]

Alexey Bakhtin abakhtin at openjdk.java.net
Fri Oct 22 18:45:33 UTC 2021


On Thu, 21 Oct 2021 19:16:34 GMT, Alexey Bakhtin <abakhtin at openjdk.org> wrote:

>> Hello,
>> 
>> Could you please review the small patch for the issue described in JDK-8271199: Mutual TLS handshake fails signing client certificate with custom sensitive PKCS11 key
>> 
>> I suggest updating the RSAPSSSignature.isValid() method to verify if provided key components can be applied to SunRSASign implementation. 
>> If not applied, implementation can try to select signer from other providers
>> 
>> Regards
>> Alexey
>
> Alexey Bakhtin has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Change exception handling

Agree, It looks less readable. Just tried to avoid rethrowing the exception. Reverted back to the original version.

-------------

PR: https://git.openjdk.java.net/jdk/pull/4887



More information about the security-dev mailing list