Add note that only SHA1withRSA issuer is actually used

Author: peterdettman

pkix/src/test/java/org/bouncycastle/cms/test/CMSTestUtil.java

@@ -504,6 +504,10 @@ public static X509Certificate makeOaepCertificate(KeyPair subKP, String _subDN,
 
     private static JcaContentSignerBuilder makeContentSignerBuilder(PublicKey issPub)
     {
+        /*
+         * NOTE: Current ALL test certificates are issued under a SHA1withRSA root, so this list is mostly
+         * redundant (and also incomplete in that it doesn't handle EdDSA or ML-DSA issuers).
+         */
         JcaContentSignerBuilder contentSignerBuilder;
         if (issPub instanceof RSAPublicKey)
         {
@@ -521,10 +525,14 @@ else if (issPub.getAlgorithm().equals("ECGOST3410"))
         {
             contentSignerBuilder = new JcaContentSignerBuilder("GOST3411withECGOST3410");
         }
-        else
+        else if (issPub.getAlgorithm().equals("GOST3410"))
         {
             contentSignerBuilder = new JcaContentSignerBuilder("GOST3411WithGOST3410");
         }
+        else
+        {
+            throw new UnsupportedOperationException("Algorithm handlers incomplete");
+        }
 
         contentSignerBuilder.setProvider(BouncyCastleProvider.PROVIDER_NAME);