[security-dev 01294]: Re: Need reviewer for 6883983: JarVerifier dependency on sun.security.pkcs should be removed

[Xueming Shen]

approved.

Alan Bateman wrote:

I need a reviewer for this trivial change to the JAR verification code. In the JAR verification code it catches sun.security.pkcs.ParsingException (it's been there forever). As the code also catches IOException (and ParsingException is an IOException) it looks like this dependency can be safely removed.

Thanks,

Alan.

--- a/src/share/classes/java/util/jar/JarVerifier.java
+++ b/src/share/classes/java/util/jar/JarVerifier.java
@@ -293,9 +293,6 @@ class JarVerifier {
                }
                sfv.process(sigFileSigners);

-            } catch (sun.security.pkcs.ParsingException pe) {

- if (debug != null) debug.println("processEntry caught: "+pe);

-                // ignore and treat as unsigned
            } catch (IOException ioe) {

if (debug != null) debug.println("processEntry caught: "+ioe);

                // ignore and treat as unsigned