tree 1bf0226d795aa91eb5292e9ec232bf6648871106
parent d92cdfce1b3eb77850cd0b511d9da28bb833ccd8
author Kenny Root <kroot@google.com> 1454670317 -0800
committer Kenny Root <kroot@google.com> 1454671352 -0800

Allow inherited DSAKey and ECKey parameters

RFC 3279 sections 2.3.2 and 2.3.5 say that DSA and EC keys respectively
may inherit from its issuer's key parameters.

When setting "jdk.certpath.disabledAlgorithms=DSA keySize < 1024" and
running the NIST PKIX test 4.1.5 Valid DSA Parameter Inheritance Test5
an exception is thrown because the key size of the DSA with inherited
parameters is checked. However, inherited parameter DSA keys have null
DSAParams which causes a NullPointerException.

It's okay to skip checking this key, because the parent key from which
it inherits its parameters will be rejected when it is tested and the
certpath will fail to build.

Bug: 26984935
Change-Id: I071578b19729a41d6ad64e9fe18e45b492ad4cff