New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
8259535: ECDSA SignatureValue do not always have the specified length #2550
Conversation
8259535: ECDSA SignatureValue do not always have the specified length
👋 Welcome back weijun! A progress list of the required criteria for merging this PR into |
...sses/com/sun/org/apache/xml/internal/security/algorithms/implementations/SignatureECDSA.java
Show resolved
Hide resolved
@wangweij This change now passes all automated pre-integration checks. ℹ️ This project also has non-automated pre-integration requirements. Please see the file CONTRIBUTING.md for details. After integration, the commit message for the final commit will be:
You can use pull request commands such as /summary, /contributor and /issue to adjust it as needed. At the time when this comment was updated there had been 311 new commits pushed to the
As there are no conflicts, your changes will automatically be rebased on top of these commits when integrating. If you prefer to avoid this automatic rebasing, please check the documentation for the /integrate command for further details. ➡️ To integrate this PR with the above commit message to the |
/integrate |
@wangweij Since your change was applied there have been 319 commits pushed to the
Your commit was automatically rebased without conflicts. Pushed as commit a4c2496. 💡 You may see a message that your pull request was closed with unmerged commits. This can be safely ignored. |
The code change fixes the ECDSA XML signature length issue. It should only happen when there is no P1363 ECDSA support, which is not true when SunEC is used.
If a PrivateKey is not of ECPrivateKey type then the bug will still show up. Technically, we can drill into the OID/parameter of the ASN.1 encoding and do further evaluation, but I think this is not worth doing. Please advise me if you think differently.
Progress
Issue
Reviewers
Download
$ git fetch https://git.openjdk.java.net/jdk pull/2550/head:pull/2550
$ git checkout pull/2550