RFR: 8367104: Check for RSASSA-PSS parameters when validating certificates against algorithm constraints [v12]

[Artur Barashev]

> RSASSA-PSS is currently the only signature algorithm we support that comes with algorithm parameters. We don't check for those parameters when validating certificates against supported signature algorithm constraints.

Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:

  Algorithm Constraints unit test for a mixed-up and valid cert chains

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/27146/files
  - new: https://git.openjdk.org/jdk/pull/27146/files/0ac712aa..7c3031d6

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=27146&range=11
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=27146&range=10-11

  Stats: 279 lines in 2 files changed: 277 ins; 1 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/27146.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27146/head:pull/27146

PR: https://git.openjdk.org/jdk/pull/27146