RFR: 8277976: Break up SEQUENCE in X509Certificate::getSubjectAlternativeNames and X509Certificate::getIssuerAlternativeNames in otherName [v5]

Weijun Wang weijun at openjdk.java.net
Thu Feb 17 20:45:12 UTC 2022


On Thu, 17 Feb 2022 19:42:30 GMT, Michael Osipov <duke at openjdk.java.net> wrote:

>> But in this case, we still have a place to provide the raw bytes. Maybe that's better? Or you'd rather be guaranteed that one particular otherName should always have a string there and there's no need to do an `instanceof` check? What if the tag is already wrong and I don't know it should be a string?
>
> @wangweij So you have selected to really swallow the exception here?

Yes. I don't want to let the method fail. Since `instanceof String` should be called anyway the caller can decide how to fail.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7167



More information about the security-dev mailing list