Hi Alan,
Yes, it is likely to introduce the issue again. We should consider a
regression test. I just filed a follow-up bug in the JBS:
https://bugs.openjdk.java.net/browse/JDK-8207174
Thanks,
Xuelei
On 7/11/2018 11:53 PM, Alan Bateman wrote:
On 12/07/2018 05:47, Xuelei Fan wrote:
Hi,
Please review the update:
http://cr.openjdk.java.net/~xuelei/8207029/webrev.00/
It's an interesting user case of the TrustManagerFactory and
KeyManagerFactory. The KeyManager or TrustManager implementation may
be not implemented in the same provider as SSLSocket/SSLEngine.
See also
http://mail.openjdk.java.net/pipermail/security-dev/2018-July/017536.html.
Xuelei - is there follow-up work to develop some tests that use custom
KeyManager or TrustManager implementations that are in different
providers to the SSLEngine. I realize not many will do that but it seems
easy to break these type of scenarios if we don't have tests.
-Alan.
