Loading...

XML

Word

Printable

Type: Enhancement
Resolution: Fixed
Priority: P2
Fix Version/s: 9
Affects Version/s: 9
Component/s: security-libs
Labels:

Subcomponent:
javax.crypto
Resolved In Build:
b148

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8197094	8u192	Sean Coffey	P2	Resolved	Fixed	b01
JDK-8188606	8u172	Sean Coffey	P2	Resolved	Fixed	b03
JDK-8190644	8u171	Sean Coffey	P2	Resolved	Fixed	b01
JDK-8174746	8u162	Sean Coffey	P2	Closed	Fixed	b01
JDK-8189383	8u161	Sean Coffey	P2	Closed	Fixed	b03
JDK-8198138	emb-8u171	Sean Coffey	P2	Resolved	Fixed	b01
JDK-8192656	emb-8u161	Sean Coffey	P2	Resolved	Fixed	b03
JDK-8188746	7u181	Sean Coffey	P2	Resolved	Fixed	b01
JDK-8174747	7u171	Sean Coffey	P2	Closed	Fixed	b03
JDK-8200031	openjdk7u	Sean Coffey	P2	Resolved	Fixed	master
JDK-8188319	6u191	Sean Coffey	P2	Resolved	Fixed	b01
JDK-8174748	6u181	Sean Coffey	P2	Closed	Fixed	b03

Oracle JDK/JRE has received approval to enable unlimited policy by default.

The plan is to set the default configure property to "enabled".

For distributions that must continue to use limited crypto, they need to add the configure flag to their build:

    // --disable-unlimited-crypto
    // Disable unlimited crypto policy [enabled]

    % sh configure --disable-unlimited-crypto

backported by

JDK-8188319 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8188606 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8188746 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8190644 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8192656 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8197094 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8198138 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8200031 Enable unlimited cryptographic policy by default in Oracle JDK builds

Resolved

JDK-8174746 Enable unlimited cryptographic policy by default in Oracle JDK builds

Closed

JDK-8174747 Enable unlimited cryptographic policy by default in Oracle JDK builds

Closed

JDK-8174748 Enable unlimited cryptographic policy by default in Oracle JDK builds

Closed

JDK-8189383 Enable unlimited cryptographic policy by default in Oracle JDK builds

Closed

duplicates

JDK-7024850 Consider shipping Unlimited Crypto Policy files by default.

Closed

is blocked by

JDK-8157561 Ship the unlimited policy files in JDK Updates

Resolved

relates to

JDK-8169335 Add a crypto policy fallback in case Security Property 'crypto.policy' does not exist

Closed

JDK-8170245 [TEST_BUG] Cipher tests fail when running with unlimited policy

Resolved

JDK-8170247 java/security/SecureRandom/ApiTest fails when run with unlimited policy

Resolved

JDK-8186093 A comment in the java.security configuration file incorrectly says that "strong but limited" is the default value

Closed

(7 backported by, 1 duplicates, 1 is blocked by, 4 relates to)

1.	Update docs to reflect unlimited policy file by default		Resolved	Raymond Gallardo
2.	Release Note: Unlimited cryptography enabled by default		Closed	Sean Coffey

Assignee:: Bradford Wetmore
Reporter:: Bradford Wetmore
Votes:: 0 Vote for this issue
Watchers:: 13 Start watching this issue

Due:: 2016-12-22
Created:: 2016-11-21 17:50
Updated:: 2018-03-21 09:46
Resolved:: 2016-12-05 17:07

Details

Backports

Description

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates