-
Enhancement
-
Resolution: Fixed
-
P2
-
8u31, 9
-
b115
-
x86_64
-
windows_7
-
Verified
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8243737 | 8u261 | Prasadarao Koppula | P2 | Resolved | Fixed | b05 |
JDK-8197097 | 8u192 | Sean Coffey | P2 | Resolved | Fixed | b01 |
JDK-8195325 | 8u172 | Sean Coffey | P2 | Resolved | Fixed | b03 |
JDK-8168015 | 8u171 | Sean Coffey | P3 | Resolved | Fixed | b01 |
JDK-8190554 | 8u162 | Sean Coffey | P2 | Resolved | Fixed | b05 |
JDK-8190468 | 8u161 | Sean Coffey | P2 | Closed | Fixed | b05 |
JDK-8247074 | emb-8u261 | Prasadarao Koppula | P2 | Resolved | Fixed | team |
JDK-8198107 | emb-8u171 | Sean Coffey | P2 | Resolved | Fixed | b01 |
JDK-8192658 | emb-8u161 | Sean Coffey | P2 | Resolved | Fixed | b05 |
JDK-8189947 | 7u181 | Sean Coffey | P2 | Resolved | Fixed | b01 |
JDK-8190470 | 7u171 | Sean Coffey | P2 | Closed | Fixed | b05 |
JDK-8200021 | openjdk7u | Sean Coffey | P2 | Resolved | Fixed | master |
JDK-8190379 | 6u191 | Sean Coffey | P2 | Resolved | Fixed | b01 |
JDK-8190472 | 6u181 | Sean Coffey | P2 | Closed | Fixed | b05 |
Lots of Webservers have SSL Certificates with AES 128 and Diffie Hellmann Keys with more than 2048 Bits. When i try to connect to one of these servers with Java i became an Error that says:"Prime size must be multiple of 64, and can only range from 512 to 2048 (inclusive)". To be more dynamic for the future please remove the maximum prime size and make it unlimited.
JUSTIFICATION :
To open a secure connection to an webserver via https its necessary to use SSL Certificates with DH-Keys which has an prime size bigger than 2048.
EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
Unlimited maximum prime size.
ACTUAL -
The prime size has an maximum of 2048.
- backported by
-
JDK-8189947 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8190379 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8190554 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8192658 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8195325 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8197097 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8198107 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8200021 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8243737 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8247074 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8168015 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Resolved
-
-
JDK-8190468 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Closed
-
-
JDK-8190470 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Closed
-
-
JDK-8190472 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
-
- Closed
-
- blocks
-
JDK-8140436 Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
-
- Resolved
-
-
JDK-8145252 JEP 332: Transport Layer Security (TLS) 1.3
-
- Closed
-
- duplicates
-
JDK-8147969 Print size of DH keysize when errors are encountered
-
- Resolved
-
-
JDK-8133621 2048-bit DH upper bound too small for geotrust ssl ca - g3 error
-
- Closed
-
-
JDK-8133622 Unable to read some of the new https website
-
- Closed
-
- relates to
-
JDK-8191175 P11KeyPairGenerator throws ProviderException instead of InvalidParameterException with unsupported keysize
-
- Resolved
-
-
JDK-8190449 [TEST_BUG] sun/security/pkcs11/KeyPairGenerator/TestDH2048.java fails on Solaris x64 5.10
-
- Resolved
-
-
JDK-8158116 com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java failed with timeout
-
- Resolved
-
-
JDK-8173298 Update KeySize Restrictions sections of Oracle Providers doc
-
- Resolved
-
-
JDK-8196952 Bad primeCertainty value setting in DSAParameterGenerator
-
- Resolved
-
-
JDK-8157333 sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java shouldn't exclude DSA size (3072, 256) for SUN provider
-
- Closed
-
-
JDK-8180323 6u141/6u151 Could not generate DH keypair
-
- Closed
-
-
JDK-8301700 Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
-
- Resolved
-