RFR: 8325254: CKA_TOKEN private and secret keys are not necessarily sensitive

Tue Feb 6 17:11:53 UTC 2024

On Mon, 5 Feb 2024 18:23:30 GMT, Martin Balao <mbalao at openjdk.org> wrote:

> Hi,
> 
> May I have a review for this fix to [JDK-8325254](https://bugs.openjdk.org/browse/JDK-8325254)?
> 
> With this change, CKA_TOKEN = true is used as an indicator of a sensitive private key (opaque) only if the token is NSS. The behavior previous to [JDK-8271566](https://bugs.openjdk.org/browse/JDK-8271566) is restored for non-NSS tokens.
> 
> No regressions observed in jdk/sun/security/pkcs11.

Your change looks good to me. It makes sense. What testing has been done?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/17712#issuecomment-1930387881