-
Bug
-
Resolution: Fixed
-
P4
-
8u112, 9
-
None
-
b143
The algorithm constraint does not apply to root/trusted certificate as the application or customer has made the decision to trust the cert although it is weak or broken.
Although the cert path definition does not contain the trusted certificate, it is not easy to understand this point for general developers. Better to document explicitly that algorithm restrictions (jdk.certpath.disabledAlgorithms, jdk.jar.disabledAlgorithms) do not apply to trusted certs.
Although the cert path definition does not contain the trusted certificate, it is not easy to understand this point for general developers. Better to document explicitly that algorithm restrictions (jdk.certpath.disabledAlgorithms, jdk.jar.disabledAlgorithms) do not apply to trusted certs.
- relates to
-
JDK-8168868 Add additional admin-level documentation for trusted certs not being "disabled"
-
- Resolved
-
-
JDK-8168880 Document that algorithm restrictions do not apply to trusted anchors
-
- Closed
-