-
Sub-task
-
Resolution: Delivered
-
P4
-
7u121, 8u92, 8u101, 9
-
Verified
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8161391 | 8u102 | Clifford Wayne | P4 | Closed | Withdrawn | |
JDK-8161390 | 8u101 | Clifford Wayne | P4 | Closed | Delivered | |
JDK-8176157 | 8u92 | Owen Stuart | P4 | Closed | Delivered | b31 |
JDK-8165042 | 7u121 | Clifford Wayne | P4 | Closed | Delivered |
Java SE KeyStore does not allow certificates that have the same aliases.
http://docs.oracle.com/javase/8/docs/api/java/security/KeyStore.html
However, on Windows, multiple certificates stored in one keystore are allowed to have non-unique friendly names.
The fix forJDK-6483657 makes it possible to operate on such non-uniquely named certificates through the Java API by artificially making the visible aliases unique.
Please note, this fix does not enable creating same-named certificates with the Java API. It only allows you to deal with same-named certificates that were added to the keystore by 3rd party tools.
It is still recommended that your design not use multiple certificates with the same name. In particular, the following sentence will not be removed from the Java documentation:
"In order to avoid problems, it is recommended not to use aliases in a KeyStore that only differ in case."
http://docs.oracle.com/javase/8/docs/api/java/security/KeyStore.html
http://docs.oracle.com/javase/8/docs/api/java/security/KeyStore.html
However, on Windows, multiple certificates stored in one keystore are allowed to have non-unique friendly names.
The fix for
Please note, this fix does not enable creating same-named certificates with the Java API. It only allows you to deal with same-named certificates that were added to the keystore by 3rd party tools.
It is still recommended that your design not use multiple certificates with the same name. In particular, the following sentence will not be removed from the Java documentation:
"In order to avoid problems, it is recommended not to use aliases in a KeyStore that only differ in case."
http://docs.oracle.com/javase/8/docs/api/java/security/KeyStore.html
- backported by
-
JDK-8161390 Release Note: MSCAPI KeyStore can handle same named certificates
-
- Closed
-
-
JDK-8161391 Release Note: MSCAPI KeyStore can handle same named certificates
-
- Closed
-
-
JDK-8165042 Release Note: MSCAPI KeyStore can handle same named certificates
-
- Closed
-
-
JDK-8176157 Release Note: MSCAPI KeyStore can handle same named certificates
-
- Closed
-