The RSA-PSS services now reject a PSSParameterSpec whose trailerField is not 1 with the InvalidAlgorithmParameterException Signature.setParameter declares, and check it ahead of the assignments so a refused spec leaves the engine as it was rather than being half-applied, relates to github #2421.