Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8072452

Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

    XMLWordPrintable

Details

    • b115
    • x86_64
    • windows_7
    • Verified

    Backports

      Description

        A DESCRIPTION OF THE REQUEST :
        Lots of Webservers have SSL Certificates with AES 128 and Diffie Hellmann Keys with more than 2048 Bits. When i try to connect to one of these servers with Java i became an Error that says:"Prime size must be multiple of 64, and can only range from 512 to 2048 (inclusive)". To be more dynamic for the future please remove the maximum prime size and make it unlimited.

        JUSTIFICATION :
        To open a secure connection to an webserver via https its necessary to use SSL Certificates with DH-Keys which has an prime size bigger than 2048.

        EXPECTED VERSUS ACTUAL BEHAVIOR :
        EXPECTED -
        Unlimited maximum prime size.
        ACTUAL -
        The prime size has an maximum of 2048.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8189947 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8190379 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8190554 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8192658 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8195325 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8197097 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8198107 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8200021 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8243737 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8247074 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8168015 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8190468 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8190470 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8190472 Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed
            blocks

            Enhancement - null JDK-8140436 Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS

            • P3 - Major loss of function.
            • Resolved

            JEP - Java Enhancement Proposal JDK-8145252 JEP 332: Transport Layer Security (TLS) 1.3

            • P2 - Crashes, loss of data, severe memory leak.
            • Closed
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-8147969 Print size of DH keysize when errors are encountered

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Enhancement - null JDK-8133621 2048-bit DH upper bound too small for geotrust ssl ca - g3 error

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed

            Enhancement - null JDK-8133622 Unable to read some of the new https website

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8191175 P11KeyPairGenerator throws ProviderException instead of InvalidParameterException with unsupported keysize

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8190449 [TEST_BUG] sun/security/pkcs11/KeyPairGenerator/TestDH2048.java fails on Solaris x64 5.10

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8158116 com/sun/crypto/provider/KeyAgreement/SupportedDHParamGens.java failed with timeout

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8173298 Update KeySize Restrictions sections of Oracle Providers doc

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8196952 Bad primeCertainty value setting in DSAParameterGenerator

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8157333 sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java shouldn't exclude DSA size (3072, 256) for SUN provider

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8180323 6u141/6u151 Could not generate DH keypair

            • P3 - Major loss of function.
            • Closed

            Enhancement - null JDK-8301700 Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit

            • P3 - Major loss of function.
            • Resolved

            Activity

              People

                xuelei Xuelei Fan
                webbuggrp Webbug Group
                Votes:
                0 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: