RFR: 8335288: SunPKCS11 initialization will call C_GetMechanismInfo on unsupported mechanisms
Valerie Peng
valeriep at openjdk.org
Mon Aug 5 21:30:30 UTC 2024
On Wed, 17 Jul 2024 00:48:20 GMT, Valerie Peng <valeriep at openjdk.org> wrote:
> Can someone help review this fix? Changed the required-mechanism check by checking if the particular mechanism is inside the list of enabled supported mechanisms. This should be more reliable than calling C_GetMechanismInfo(..) on the required mechanism given vendors may return various sorts of error codes.
>
> Thanks,
> Valerie
@martinuy Can you also review this? IIRC, this is introduced by the PBE PKCS12 changes earlier.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/20207#issuecomment-2269950021
More information about the security-dev
mailing list