On Wed, 6 Aug 2025 04:50:50 GMT, Valerie Peng <valer...@openjdk.org> wrote:

>> src/java.base/share/conf/security/java.security line 793:
>> 
>>> 791: #
>>> 792: # Service:  (one of the following, more service may be added later)
>>> 793: #     Cipher | KeyStore | MessageDigest | Signature
>> 
>> Should we consider matching all services if service name is missing (make 
>> service name optional)?
>
> Missing service should be treated as error. If we want to match all services, 
> it is better represented as "*". This may be considered for future 
> enhancement if there is a demand.

I thought about an option of using `*` wildcard too. We can do it in this 
iteration simply by replacing `*.algorithm` with `Cipher.algorithm`,  
`KeyStore.algorithm`, `MessageDiges.algorithmt`,  `Signature.algorithm`.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/26377#discussion_r2257516193

Reply via email to