RFR: 8299746: Accept unknown signatureAlgorithm in PKCS7 SignerInfo

Xue-Lei Andrew Fan xuelei at openjdk.org
Fri Jan 6 18:52:01 UTC 2023


On Fri, 6 Jan 2023 15:52:03 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> Modern signature algorithms provided by a 3rd-party provider might not be recognized by JDK code yet.

src/java.base/share/classes/sun/security/pkcs/SignerInfo.java line 540:

> 538:                 }
> 539:                 if (keyAlg.equals("EC")) keyAlg = "ECDSA";
> 540:                 String sigAlg = digAlg + "with" + keyAlg;

The line could be moved into the try block.

-------------

PR: https://git.openjdk.org/jdk/pull/11883



More information about the security-dev mailing list