tree 5e5e01088a50d26baaa881e5c33c5e821d9ba914
parent 6831aa45aacb1fb2d19e7fa74984309351c9e361
author Alex Klyubin <klyubin@google.com> 1433952773 -0700
committer The Android Automerger <android-build@google.com> 1433971798 -0700

Fix X509CertificateTest.testVerifyPublicKeyString failure.

The test was failing because it was making the wrong assumption that
JCA's Signature implementation will select the implementation from the
highest priority provider which offers the matching signature
algorithm. This assumption is wrong because it does not take into
consideration that JCA also filters providers using
SupportedKeyClasses and SupportedKeyFormats attributes.

In this particular case, AndroidKeyStore Provider happens to be the
highest priority Provider which offers Signature.MD5withRSA. However,
according to its declaration, it offers that only for public keys
which are instances of AndroidKeyStorePublicKey.

The fix is to rely on JCA's Signature implementation selection
mechanism to find the highest priority provider which supports the
desired public key.

Bug: 21735869
Change-Id: Ie40f8a1cbf898966614a290c2d6cfe8350a1e99f