Expand policyTreeValidator JavaDoc with that it depends on JCA provider

emlun · emlun · commit 86679127501f · 2022-09-05T13:01:18.000+02:00
diff --git a/webauthn-server-core/src/main/java/com/yubico/webauthn/attestation/AttestationTrustSource.java b/webauthn-server-core/src/main/java/com/yubico/webauthn/attestation/AttestationTrustSource.java
@@ -118,9 +118,10 @@ class TrustRootsResult {
      * Predicate} should return <code>true</code> if the policy tree is acceptable, and <code>false
      * </code> otherwise.
      *
-     * <p>This may be required if any certificate in the certificate path contains a certificate
-     * policies extension marked critical. If this is not set, then such a certificate will be
-     * rejected by the certificate path validator.
+     * <p>Depending on your <code>"PKIX"</code> JCA provider configuration, this may be required if
+     * any certificate in the certificate path contains a certificate policies extension marked
+     * critical. If this is not set, then such a certificate will be rejected by the certificate
+     * path validator from the default provider.
      *
      * <p>Consult the <a
      * href="https://docs.oracle.com/en/java/javase/17/security/java-pki-programmers-guide.html#GUID-3AD41382-E729-469B-83EE-CB2FE66D71D8">Java

Original file line number	Diff line number	Diff line change
`@@ -118,9 +118,10 @@ class TrustRootsResult {`
`118`	`118`	`* Predicate} should return <code>true</code> if the policy tree is acceptable, and <code>false`
`119`	`119`	`* </code> otherwise.`
`120`	`120`	`*`
`121`		`- * <p>This may be required if any certificate in the certificate path contains a certificate`
`122`		`- * policies extension marked critical. If this is not set, then such a certificate will be`
`123`		`- * rejected by the certificate path validator.`
	`121`	`+ * <p>Depending on your <code>"PKIX"</code> JCA provider configuration, this may be required if`
	`122`	`+ * any certificate in the certificate path contains a certificate policies extension marked`
	`123`	`+ * critical. If this is not set, then such a certificate will be rejected by the certificate`
	`124`	`+ * path validator from the default provider.`
`124`	`125`	`*`
`125`	`126`	`* <p>Consult the <a`
`126`	`127`	`* href="https://docs.oracle.com/en/java/javase/17/security/java-pki-programmers-guide.html#GUID-3AD41382-E729-469B-83EE-CB2FE66D71D8">Java`