RFR: 8327461: KeyStore getEntry is not thread-safe [v3]
Hai-May Chao
hchao at openjdk.org
Thu Mar 7 23:13:14 UTC 2024
> Change was made to engineGetEntry() in PKCS12KeyStore to extract the key and certificate chain from Entry only once. This is because the entry may get updated between engineGetKey() and engineGetCertificateChain() which causes inconsistent result. A new test was added to assess and manipulate PKCS12KeyStore with read and write operations concurrently from multiple threads. Thanks!
Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision:
Update engineIsKeyEntry and engineIsCertificateEntry
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/18156/files
- new: https://git.openjdk.org/jdk/pull/18156/files/97bf0ece..5390a426
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=18156&range=02
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=18156&range=01-02
Stats: 13 lines in 1 file changed: 9 ins; 0 del; 4 mod
Patch: https://git.openjdk.org/jdk/pull/18156.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/18156/head:pull/18156
PR: https://git.openjdk.org/jdk/pull/18156
More information about the security-dev
mailing list