Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-5090940

KeyStore specification needs to mention alias case (in)sensitivity

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P4 P4
    • 6
    • 6
    • security-libs
    • beta
    • generic
    • generic

      The KeyStore specification currently does not mention whether aliases are case sensitive or case insensitive. This has lead to problems and misunderstandings and should be clarified.

      The historic situation is that the JKS/JCEKS/PKCS#12 treat aliases as case insensitive (and convert to lower case internally). However, since this was never documented, some 3rd party implementation behave differently. Also, some other "KeyStore" formats like PKCS#11 use case sensitive aliases ("labels").

      The best solution may be to say something like "whether aliases are case sensitive is implementation dependent. In order to avoid problems, it is recommended not to use aliases in a KeyStore that only differ in case"

            xuelei Xuelei Fan
            andreas Andreas Sterbenz
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: