On 12/9/19 1:04 PM, Anthony Scarpino wrote:
I've updated the webrev to address many of the comments. In particular
adding checks when keys given directly. Also, the changing from
legacyEC hardcoded list to a security property jdk.disabled.namedCurves.
https://cr.openjdk.java.net/~ascarpino/8233228/webrev.01/
* ConstraintsParameters.java
- minor, but toString() could use a StringBuilder to avoid extra String
allocations.
* DisabledAlgorithmConstraints.java
107 if (s.compareToIgnoreCase(PROPERTY_DISABLED_EC_CURVES)
== 0) {
or just use s.equalsCaseIgnore() instead.
--Sean
