--- old/src/java.base/share/classes/sun/security/provider/certpath/PKIXMasterCertPathValidator.java 2018-07-10 13:46:07.654516592 +0100 +++ new/src/java.base/share/classes/sun/security/provider/certpath/PKIXMasterCertPathValidator.java 2018-07-10 13:46:07.158516592 +0100 @@ -25,6 +25,8 @@ package sun.security.provider.certpath; +import jdk.internal.event.CertificateChainEvent; +import jdk.internal.event.EventHelper; import sun.security.util.Debug; import java.util.Collections; @@ -36,6 +38,7 @@ import java.security.cert.PKIXCertPathChecker; import java.security.cert.PKIXReason; import java.security.cert.X509Certificate; +import java.util.stream.Collectors; /** * This class is initialized with a list of PKIXCertPathCheckers @@ -144,6 +147,14 @@ if (debug != null) debug.println("\ncert" + (i+1) + " validation succeeded.\n"); + + CertificateChainEvent cce = new CertificateChainEvent(); + if(cce.isEnabled() || EventHelper.isLoggingSecurity()) { + String c = reversedCertList.stream() + .map(x -> x.getSerialNumber().toString(16)) + .collect(Collectors.joining(", ")); + EventHelper.commitCertChainEvent(cce, c); + } } if (debug != null) {