Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-6354946

Remove access to keystores that may contain untrusted certs

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: P3 P3
    • 6
    • 6
    • security-libs
    • beta
    • 6
    • b63
    • generic
    • generic

      Windows keystores and certificate stores are accessible via the java.security.KeyStore API
      using the SunMSCAPI provider. The provider marks all the certificates present in its stores
      as trusted certificates. This has the undesirable effect of treating each certificate as
      a trust anchor.

      The provider should mark only the certificates in the MY and ROOT stores as trusted.

            vinnie Vincent Ryan
            vinnie Vincent Ryan
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Created:
              Updated:
              Resolved:
              Imported:
              Indexed: