RFR: 8352277: java.security documentation: incorrect regex syntax describing "usage" algorithm constraint

Artur Barashev abarashev at openjdk.org
Tue Mar 25 19:25:12 UTC 2025


On Tue, 25 Mar 2025 18:51:36 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

>> We have an incorrect regex syntax when describing a "usage" algorithm constraint. Current syntax indicates that usage types are optional while they are not: at least one usage type should be specified.
>
> src/java.base/share/conf/security/java.security line 541:
> 
>> 539: #
>> 540: #   UsageType:
>> 541: #       ([TLSServer] | [TLSClient] | [SignedJAR])
> 
> It looks like we list the alternatives without brackets, for example Constraint at line #518 as:
> 
>  518 #   Constraint:
>  519 #       KeySizeConstraint | CAConstraint | DenyAfterConstraint |
>  520 #       UsageConstraint
> 
>  Would you consider to remove the brackets here?

Yes, it's inconsistent with the rest of the file actually. I'll check which version is semantically correct and make changes. Thanks!

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24231#discussion_r2012798596


More information about the security-dev mailing list