Integrated: 8309214: sun/security/pkcs11/KeyStore/ fails after 8301154

Valerie Peng valeriep at
Wed Aug 23 00:15:47 UTC 2023

On Thu, 3 Aug 2023 20:51:33 GMT, Valerie Peng <valeriep at> wrote:

> This change addresses the scenario where a certificate is first stored as part of a certificate chain and then stored again as a certificate corresponding to a PrivateKey entry. Newer version of NSS errors out with CKR_GENERAL_ERROR with the 2nd store, i.e. C_CreateObject() call.
> Proposed fix is to check for match before calling C_CreateObject(), if a match is found, set its alias instead.

This pull request has now been integrated.

Changeset: ba6cdbe2
Author:    Valerie Peng <valeriep at>
Stats:     53 lines in 2 files changed: 39 ins; 12 del; 2 mod

8309214: sun/security/pkcs11/KeyStore/ fails after 8301154

Reviewed-by: mbaesken, jnimeh



More information about the security-dev mailing list