Integrated: 8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries

Valerie Peng valeriep at openjdk.org
Tue May 23 21:15:06 UTC 2023


On Mon, 1 May 2023 19:49:05 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

> Could someone help review this PKCS11KeyStore fix regarding the cert chain removal?
> 
> The proposed fix will not remove the cert if it has a corresponding private key or is an issuer of other entities in the same keystore.
> 
> Thanks,
> Valerie

This pull request has now been integrated.

Changeset: 6b27dad7
Author:    Valerie Peng <valeriep at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/6b27dad76e20131503da15119d930df17dd517d9
Stats:     348 lines in 4 files changed: 264 ins; 37 del; 47 mod

8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries

Reviewed-by: weijun, hchao

-------------

PR: https://git.openjdk.org/jdk/pull/13743



More information about the security-dev mailing list