RFR: 8349583: Add mechanism to disable signature schemes based on their TLS scope [v19]

Sean Mullan mullan at openjdk.org
Thu Mar 27 19:41:27 UTC 2025


On Thu, 27 Mar 2025 19:35:48 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> test/jdk/sun/security/ssl/SignatureScheme/DisableSignatureSchemePerScopeTLS12.java line 52:
>> 
>>> 50:     protected static final String DISABLED_CONSTRAINTS =
>>> 51:             HANDSHAKE_DISABLED_SIG + " usage HandShakesignature, "
>>> 52:             + CERTIFICATE_DISABLED_SIG + " usage certificateSignature";
>> 
>> Nit: s/certificateSignature/CertificateSignature/
>
> Actually this is done on purpose to check case-insensitive matching, I use this approach in other tests as well.

Ok, please add a comment above indicating that.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/23681#discussion_r2017498251


More information about the security-dev mailing list