RFR: 8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries

Mark Powers mpowers at openjdk.org
Tue May 2 19:22:15 UTC 2023


On Mon, 1 May 2023 19:49:05 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

> Could someone help review this PKCS11KeyStore fix regarding the cert chain removal?
> 
> The proposed fix will not remove the cert if it has a corresponding private key or is an issuer of other entities in the same keystore.
> 
> Thanks,
> Valerie

The changes LGTM.
Your comments helped a lot.

-------------

PR Review: https://git.openjdk.org/jdk/pull/13743#pullrequestreview-1409744045



More information about the security-dev mailing list