RFR: JDK-8311592 ECKeySizeParameterSpec causes too many exceptions on third party providers

Anthony Scarpino ascarpino at openjdk.org
Fri Jul 21 00:18:54 UTC 2023


Hi,

This fix eliminates needless exceptions each time the EC key size is obtained through AlgorithmParameters on third party providers.  These providers throw an InvalidParameterSpecException as `sun.security.util.KeyUtil.getKey()` sends an internal `sun.security.util.ECKeySizeParameterSpec`.   The exception is properly handled, but the number of exceptions becomes excessive with TLS.
Calling ECKeySizeParameterSpec only with SunEC resolves this issue.

Thanks

Tony

-------------

Commit messages:
 - verified fix
 - Merge remote-tracking branch 'origin' into ecsize
 - add sunec check

Changes: https://git.openjdk.org/jdk/pull/14916/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=14916&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8311592
  Stats: 14 lines in 1 file changed: 5 ins; 3 del; 6 mod
  Patch: https://git.openjdk.org/jdk/pull/14916.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/14916/head:pull/14916

PR: https://git.openjdk.org/jdk/pull/14916


More information about the security-dev mailing list