RFR: 8367104: Check for RSASSA-PSS parameters when validating certificates against algorithm constraints [v13]
Artur Barashev
abarashev at openjdk.org
Thu Sep 18 20:52:31 UTC 2025
> RSASSA-PSS is currently the only signature algorithm we support that comes with algorithm parameters. We don't check for those parameters when validating certificates against supported signature algorithm constraints.
Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
Cosmetic changes
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/27146/files
- new: https://git.openjdk.org/jdk/pull/27146/files/7c3031d6..d6cf0ccc
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=27146&range=12
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=27146&range=11-12
Stats: 2 lines in 1 file changed: 0 ins; 0 del; 2 mod
Patch: https://git.openjdk.org/jdk/pull/27146.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/27146/head:pull/27146
PR: https://git.openjdk.org/jdk/pull/27146
More information about the security-dev
mailing list