RFR: 8274471: Verification of OCSP Response signed with RSASSA-PSS fails
    Hai-May Chao 
    hchao at openjdk.java.net
       
    Thu Sep 30 23:18:36 UTC 2021
    
    
  
On Thu, 30 Sep 2021 15:44:32 GMT, Weijun Wang <weijun at openjdk.org> wrote:
> Extra parameters need to be set for RSASSA-PSS signatures. We already have a helper method for that.
> 
> Some other cleanups:
> 1. When using GET for OCSP, make sure no double slash.
> 2. Several throws clauses are not necessary.
> 
> No regression test. OCSP needs to access an external server.
As throwing ProviderException is removed from initVerifyWithParam(), could we remove the ProviderException in the try-catch block from the callers of initVerifyWithParam()? For example, one of the callers at:
https://github.com/openjdk/jdk/blob/master/src/java.base/share/classes/sun/security/pkcs/SignerInfo.java#L476
-------------
PR: https://git.openjdk.java.net/jdk/pull/5778
    
    
More information about the security-dev
mailing list