RFR: 8359956: Support algorithm constraints and certificate checks in SunX509 key manager [v14]

Artur Barashev abarashev at openjdk.org
Tue Jul 29 19:12:59 UTC 2025


On Tue, 29 Jul 2025 18:45:27 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Address review comments
>
> test/jdk/sun/security/ssl/X509KeyManager/CertChecking.java line 110:
> 
>> 108:     private static final boolean[] NO_DG_USAGE =
>> 109:             new boolean[]{false, true, true, true, true, true};
>> 110:     private static final boolean[] NO_DG_NO_KE_USAGE =
> 
> Nit: how about NO_DS instead of NO_DG?

Good catch, I'll rename it. Not sure why I used `DG` and not `DS`

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/25016#discussion_r2240722307


More information about the security-dev mailing list