Re: Code review request: JDK-8046295 - Support Trusted CA Indication extension

2017-06-14 Thread Xuelei Fan
Hi Martin, The big picture of the design looks pretty good to me, except a few comment about the JSSE conventions. I appreciate it very much. By the way, I need more time to look into the details of the specification and implementation. In order to keep the APIs simple and small, SSLParam

Re: Stricter Public Key checking corrupts JKS

2017-06-14 Thread Bernd
Hello Sean, I tried now 1.8.0_152ea b04 (May 2017) and using the keytool works now again to open the JKS with this broken certificate. It is also possible to use CertificateFactory.getInstance("X.509").getenrateCertificate(in) with the questionalble certs. This is great! From the look of JDK-8175