Name: smR10189 Date: 06/25/2004



The method Identity.removeCertificate must throw KeyManagementException
if certificate is missing but the method simply ignores such certificates.

According to the JDK 1.5.0 spec."
public void removeCertificate(Certificate certificate)
                       throws KeyManagementException
.....
    KeyManagementException - if the certificate is missing,
                             or if another exception occurs."

The example below reproduces this bug:
------------------test.java----------------
import java.io.*;
import java.security.*;
public class test extends Identity {

    public test(String name){ super(name); }
    
    public static void main(String[] av)
    {
        test t= new test("name");
        
        try {
            t.removeCertificate( new StubCertificate() );

            System.out.println("Failed: no KeyManagementException");
        } catch(KeyManagementException kme) {
            System.out.println("Passed");
        } catch(Exception e){
            System.out.println("Failed: unexpected exception " + e);
        }
    }
}

class StubCertificate implements Certificate
{
    public StubCertificate() {}
    
    public void decode(InputStream stream)
            throws KeyException, IOException {}
    public void encode(OutputStream stream)
            throws KeyException, IOException {}
    public String getFormat() { return null; }
    public Principal getGuarantor() { return null; }
    public Principal getPrincipal() { return null; }
    public String toString(boolean detailed){ return null; }
    public PublicKey getPublicKey() { return null; }
}
------------------OUTPUT-------------------
Failed: no KeyManagementException

% java -version
java version "1.5.0-beta3"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0-beta3-b57)
Java HotSpot(TM) Server VM (build 1.5.0-beta3-b57, mixed mode)

======================================================================