8133489: Better messaging for PKIX path validation matching

Reviewed-by: xuelei
This commit is contained in:
Sean Coffey 2019-06-21 08:07:18 +00:00
parent 86ce4e9448
commit 3f0730930d
2 changed files with 9 additions and 6 deletions

View File

@ -2115,8 +2115,11 @@ public class X509CertSelector implements CertSelector {
if (certSubjectKeyID == null ||
!Arrays.equals(subjectKeyID, certSubjectKeyID)) {
if (debug != null) {
debug.println("X509CertSelector.match: "
+ "subject key IDs don't match");
debug.println("X509CertSelector.match: subject key IDs " +
"don't match\nX509CertSelector.match: subjectKeyID: " +
Arrays.toString(subjectKeyID) +
"\nX509CertSelector.match: certSubjectKeyID: " +
Arrays.toString(certSubjectKeyID));
}
return false;
}

View File

@ -29,13 +29,13 @@
/**
* @test
* @bug 6852744
* @bug 6852744 8133489
* @summary PIT b61: PKI test suite fails because self signed certificates
* are being rejected
* @modules java.base/sun.security.util
* @run main/othervm KeyUsageMatters subca
* @run main/othervm KeyUsageMatters subci
* @run main/othervm KeyUsageMatters alice
* @run main/othervm -Djava.security.debug=certpath KeyUsageMatters subca
* @run main/othervm -Djava.security.debug=certpath KeyUsageMatters subci
* @run main/othervm -Djava.security.debug=certpath KeyUsageMatters alice
* @author Xuelei Fan
*/