RFR: 8367104: Check for RSASSA-PSS parameters when validating certificates against algorithm constraints [v10]

Wed Sep 17 21:58:19 UTC 2025

On Wed, 17 Sep 2025 21:11:02 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Artur Barashev has updated the pull request incrementally with two additional commits since the last revision:
>> 
>>  - Cleaner certpath validation solution
>>  - Alternative solution for JDK-8367104
>
> src/java.base/share/classes/sun/security/validator/PKIXValidator.java line 264:
> 
>> 262:         X509Certificate last = chain[chain.length - 1];
>> 263:         X500Principal issuer = last.getIssuerX500Principal();
>> 264:         X500Principal subject = last.getSubjectX500Principal();
> 
> unused variable.

It was there originally actually. `PKIXValidator.java` isn't being modified in this PR, I have restored it to the original state.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27146#discussion_r2356873189