RFR: 8367104: Check for RSASSA-PSS parameters when validating certificates against algorithm constraints [v2]

Artur Barashev abarashev at openjdk.org
Thu Sep 11 20:02:14 UTC 2025


On Tue, 9 Sep 2025 16:58:01 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> src/java.base/share/classes/sun/security/ssl/SSLAlgorithmConstraints.java line 311:
>> 
>>> 309:             supportedAlgorithms = null;
>>> 310:             supportedSignatureSchemes = null;
>>> 311:             checksDisabled = false;
>> 
>> Not necessary to initialize, those are the defaults.
>
> Right, I just coded it this way for clarity.

Removing those lines.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27146#discussion_r2342199380


More information about the security-dev mailing list