RFR: 8284926: Share the certificate NamedGroup in SignatureScheme::getSignerOfPreferableAlgorithm
Xue-Lei Andrew Fan
xuelei at openjdk.java.net
Sun Apr 17 15:04:30 UTC 2022
On Sat, 16 Apr 2022 13:59:25 GMT, John Jiang <jjiang at openjdk.org> wrote:
> It would not to generate the certificate's ECParameterSpec and NamedGroup multiple times in method `SignatureScheme::getSignerOfPreferableAlgorithm`.
src/java.base/share/classes/sun/security/ssl/SignatureScheme.java line 479:
> 477: NamedGroup namedGroup = params != null
> 478: ? NamedGroup.valueOf(params) : null;
> 479:
X509Possession.java might be a better place for the update, by caching the named group of the private key.
-------------
PR: https://git.openjdk.java.net/jdk/pull/8271
More information about the security-dev
mailing list