I don't think we should warn at all if the keysize cannot be determined
or is inaccessible. The corresponding algorithm constraints checks don't
restrict keys whose size cannot be determined, so keytool and jarsigner
should be consistent.
On 8/8/17 1:49 AM, Weijun Wang wrote:
Please review this trivial fix at
KeyUtil.getSize() are also called elsewhere when they key is weak, where key
length is not -1.