Add extended key usage constraint to the jdk.certpath.disabledAlgorithms security property

XMLWordPrintable

        ExtendedKeyUsageConstraint parameter should be added to allow the restrictions to apply to certificates based on their key usage. Here is a suggested syntax:

        # ExtendedKeyUsageConstraint
        # eku Usage(,Usage)*
        #
        # Usage
        # any | serverAuth | clientAuth | codeSigning | emailProtection | timeStamping | OCSPSigning

        This type of constraint is useful for phasing out algorithms and providing different restrictions on different types of certificates.

        jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, SHA-1 notAfter 20170101 eku serverAuth, clientAuth, codeSigning

              Assignee:
              Anthony Scarpino
              Reporter:
              Anthony Scarpino
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: