Re: RFR 8242184: CRL generation error with RSASSA-PSS

[Sean Mullan]

On 4/6/20 11:11 PM, Weijun Wang wrote:
Please review the fix at
    http://cr.openjdk.java.net/~weijun/8242184/webrev.00/

The major change is inside X509CRLImpl.java to allow params setting and reading.

I also take this chance to:

1. Provide a default -sigalg for "keytool -genkeypair -keyalg rsassa-pss".

I think you should file a CSR for that, since it is a new default, and 
the default varies based on the size of the key. You should also update 
the keytool man page section on defaults.

--Sean

2. Revert a former change in X509CertImpl.java, which might be a safer call.

Thanks,
Max