Integrated: 8327461: KeyStore getEntry is not thread-safe

Hai-May Chao hchao at openjdk.org
Mon Mar 11 16:38:06 UTC 2024


On Thu, 7 Mar 2024 17:06:19 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

> Change was made to engineGetEntry() in PKCS12KeyStore to extract the key and certificate chain from Entry only once. This is because the entry may get updated between engineGetKey() and engineGetCertificateChain() which causes inconsistent result. A new test was added to assess and manipulate PKCS12KeyStore with read and write operations concurrently from multiple threads. Thanks!

This pull request has now been integrated.

Changeset: ffd43c92
Author:    Hai-May Chao <hchao at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/ffd43c922e3b8b75a00e494d5484b6a487dd5c90
Stats:     213 lines in 2 files changed: 175 ins; 11 del; 27 mod

8327461: KeyStore getEntry is not thread-safe

Reviewed-by: djelinski, weijun

-------------

PR: https://git.openjdk.org/jdk/pull/18156



More information about the security-dev mailing list