How about letting validateChain() throw a KeyStoreException directly? --Max
> On Jul 6, 2016, at 2:44 AM, Vincent Ryan <vincent.x.r...@oracle.com> wrote: > > I’ve updated the webrev to also check for X509Certificate in both > engineSetKeyEntry methods and in engineSetEntry: > http://cr.openjdk.java.net/~vinnie/8068290/webrev.01/