Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java

Author: dghgit

tls/src/main/java/org/bouncycastle/jsse/provider/ProvAlgorithmConstraints.java

@@ -87,12 +87,20 @@ public boolean permits(Set<BCCryptoPrimitive> primitives, String algorithm, Algo
 
         if (null != provTlsDisabledAlgorithms && !provTlsDisabledAlgorithms.permits(primitives, algorithm, parameters))
         {
+            if (LOG.isLoggable(Level.FINEST))
+            {
+                LOG.finest("'" + PROPERTY_TLS_DISABLED_ALGORITHMS + "' do not permit '" + algorithm + "' with given parameters");
+            }
             return false;
         }
 
         if (enableX509Constraints && null != provX509DisabledAlgorithms
             && !provX509DisabledAlgorithms.permits(primitives, algorithm, parameters))
         {
+            if (LOG.isLoggable(Level.FINEST))
+            {
+                LOG.finest("'" + PROPERTY_CERTPATH_DISABLED_ALGORITHMS + "' do not permit '" + algorithm + "' with given parameters");
+            }
             return false;
         }
 
@@ -146,17 +154,29 @@ public boolean permits(Set<BCCryptoPrimitive> primitives, String algorithm, Key
 
         if (null != configAlgorithmConstraints && !configAlgorithmConstraints.permits(primitives, algorithm, key, parameters))
         {
+            if (LOG.isLoggable(Level.FINEST))
+            {
+                LOG.finest("Configured algorithm constraints do not permit '" + algorithm + "' with given parameters and key");
+            }
             return false;
         }
 
         if (null != provTlsDisabledAlgorithms && !provTlsDisabledAlgorithms.permits(primitives, algorithm, key, parameters))
         {
+            if (LOG.isLoggable(Level.FINEST))
+            {
+                LOG.finest("'" + PROPERTY_TLS_DISABLED_ALGORITHMS + "' do not permit '" + algorithm + "' with given parameters and key");
+            }
             return false;
         }
 
         if (enableX509Constraints && null != provX509DisabledAlgorithms
             && !provX509DisabledAlgorithms.permits(primitives, algorithm, key, parameters))
         {
+            if (LOG.isLoggable(Level.FINEST))
+            {
+                LOG.finest("'" + PROPERTY_CERTPATH_DISABLED_ALGORITHMS + "' do not permit '" + algorithm + "' with given parameters and key");
+            }
             return false;
         }