RFR: 8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries

Valerie Peng valeriep at openjdk.org
Mon May 1 19:55:38 UTC 2023


Could someone help review this PKCS11KeyStore fix regarding the cert chain removal?

The proposed fix will not remove the cert if it has a corresponding private key or is an issuer of other entities in the same keystore.

Thanks,
Valerie

-------------

Commit messages:
 - JDK-8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries

Changes: https://git.openjdk.org/jdk/pull/13743/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=13743&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8301154
  Stats: 405 lines in 7 files changed: 327 ins; 45 del; 33 mod
  Patch: https://git.openjdk.org/jdk/pull/13743.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/13743/head:pull/13743

PR: https://git.openjdk.org/jdk/pull/13743



More information about the security-dev mailing list