RFR: 8359956: Support algorithm constraints and certificate checks in SunX509 key manager [v14]

Artur Barashev abarashev at openjdk.org
Tue Jul 29 19:43:59 UTC 2025


On Tue, 29 Jul 2025 19:24:53 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Sounds good, changing it to "Both client and server should fail". `usageTestCase` method takes 2 boolean values to indicate whether to check for server and client failure.
>
> But I am still confused by what you mean by fail? Typically that means catching an Exception and checking that it is expected.

It means incorrect alias returned, or incorrect order of aliases. Yes, probably `fail` is a bad word choice here, I'll rephrase it.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/25016#discussion_r2240780122


More information about the security-dev mailing list