Mercurial > hg > openjdk > jdk9 > jdk

changeset 17275:c8d907147fcf

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
8179101: Improve algorithm constraints implementation Reviewed-by: mullan, ahgross, rhalade, igerasim
author ascarpino
date Wed, 26 Apr 2017 10:34:32 -0700
parents 3db903c9a4c8
children eb64a5eb46fa
files src/java.base/share/classes/sun/security/util/DisabledAlgorithmConstraints.java
diffstat 1 files changed, 4 insertions(+), 4 deletions(-) [+]
line wrap: on
line diff
--- a/src/java.base/share/classes/sun/security/util/DisabledAlgorithmConstraints.java	Fri Mar 31 11:24:23 2017 +0800
+++ b/src/java.base/share/classes/sun/security/util/DisabledAlgorithmConstraints.java	Wed Apr 26 10:34:32 2017 -0700
@@ -703,7 +703,6 @@
         private int minSize;            // the minimal available key size
         private int maxSize;            // the maximal available key size
         private int prohibitedSize = -1;    // unavailable key sizes
-        private int size;
 
         public KeySizeConstraint(String algo, Operator operator, int length) {
             algorithm = algo;
@@ -761,8 +760,9 @@
                     return;
                 }
                 throw new CertPathValidatorException(
-                        "Algorithm constraints check failed on keysize limits. "
-                        + algorithm + " " + size + "bit key" + extendedMsg(cp),
+                        "Algorithm constraints check failed on keysize limits. " +
+                        algorithm + " " + KeyUtil.getKeySize(key) + "bit key" +
+                        extendedMsg(cp),
                         null, null, -1, BasicReason.ALGORITHM_CONSTRAINED);
             }
         }
@@ -789,7 +789,7 @@
                 return true;
             }
 
-            size = KeyUtil.getKeySize(key);
+            int size = KeyUtil.getKeySize(key);
             if (size == 0) {
                 return false;    // we don't allow any key of size 0.
             } else if (size > 0) {