RFR: 8335288: SunPKCS11 initialization will call C_GetMechanismInfo on unsupported mechanisms

Valerie Peng valeriep at openjdk.org
Mon Aug 5 21:30:30 UTC 2024


On Wed, 17 Jul 2024 00:48:20 GMT, Valerie Peng <valeriep at openjdk.org> wrote:

> Can someone help review this fix? Changed the required-mechanism check by checking if the particular mechanism is inside the list of enabled supported mechanisms. This should be more reliable than calling C_GetMechanismInfo(..) on the required mechanism given vendors may return various sorts of error codes.
> 
> Thanks,
> Valerie

@martinuy Can you also review this? IIRC, this is introduced by the PBE PKCS12 changes earlier.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/20207#issuecomment-2269950021



More information about the security-dev mailing list