--- old/src/java.base/share/classes/sun/security/provider/certpath/AlgorithmChecker.java 2016-10-10 11:49:57.283347902 -0700 +++ new/src/java.base/share/classes/sun/security/provider/certpath/AlgorithmChecker.java 2016-10-10 11:49:57.171347907 -0700 @@ -464,7 +464,7 @@ } AlgorithmId algorithmId = x509CRLImpl.getSigAlgId(); - check(key, algorithmId); + check(algorithmId.getName(), key, algorithmId.getParameters()); } /** @@ -473,10 +473,15 @@ * @param key the public key to verify the CRL signature * @param algorithmId signature algorithm Algorithm ID */ - static void check(PublicKey key, AlgorithmId algorithmId) + void check(PublicKey key, AlgorithmId algorithmId) throws CertPathValidatorException { - String sigAlgName = algorithmId.getName(); - AlgorithmParameters sigAlgParams = algorithmId.getParameters(); + check(algorithmId.getName(), key, algorithmId.getParameters()); + } + + + private static void check(String sigAlgName, PublicKey key, + AlgorithmParameters sigAlgParams) + throws CertPathValidatorException { if (!certPathDefaultConstraints.permits( SIGNATURE_PRIMITIVE_SET, sigAlgName, key, sigAlgParams)) {