Re: RFR: [JDK-8072463] Remove requirement that AKID and SKID have to match when building certificate chain

Looks fine to me. Xuelei On 11/10/2015 10:57 PM, Sean Mullan wrote: Please review this fix for a regression that removes the requirement that a certificate's Authority Key Identifier must match the issuing certificate's Subject Key Identifier when building a certificate chain. The certificate

RFR: [JDK-8072463] Remove requirement that AKID and SKID have to match when building certificate chain

Please review this fix for a regression that removes the requirement that a certificate's Authority Key Identifier must match the issuing certificate's Subject Key Identifier when building a certificate chain. The certificate chain validation algorithm in RFC 5280 does not require that the AKI