On Wed, 10 Feb 2021 21:52:01 GMT, Hai-May Chao <hc...@openjdk.org> wrote:
>> This change is made for compliance with RFC 5280 section 4.2.1.1 for >> Authority Key Identifier extension. > > Hai-May Chao has updated the pull request incrementally with one additional > commit since the last revision: > > Test case added and not overriding -ext fix test/jdk/sun/security/tools/keytool/CheckCertAKID.java line 69: > 67: .shouldContain("0000: 00 01 02 03 04 05 06 07 08 09 10 > 11 12 13 14 15") > 68: .shouldContain("0010: 16 17 18 19") > 69: .shouldHaveExitValue(0); Or you can directly read the certificate and look at its extensions using some API. ------------- PR: https://git.openjdk.java.net/jdk/pull/2343