Loading...

XML

Word

Printable

Type: Bug
Resolution: Fixed
Priority: P2
Fix Version/s: 9
Affects Version/s: 9
Component/s: security-libs
Labels:

Subcomponent:
java.security
Introduced In Version:

9
Resolved In Build:
b164
Verification:
Verified

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8178260	10	Weijun Wang	P2	Resolved	Fixed	b04
JDK-8197350	8u192	Weijun Wang	P2	Resolved	Fixed	b01
JDK-8189508	8u172	Weijun Wang	P2	Resolved	Fixed	b03
JDK-8188699	8u171	Weijun Wang	P2	Resolved	Fixed	master
JDK-8189567	8u162	Weijun Wang	P2	Resolved	Fixed	b02
JDK-8185664	8u161	Weijun Wang	P2	Resolved	Fixed	b01
JDK-8185973	8u152	Weijun Wang	P2	Resolved	Fixed	b11
JDK-8185332	8u151	Sean Coffey	P2	Closed	Fixed	b08
JDK-8192619	emb-8u161	Weijun Wang	P2	Resolved	Fixed	b01
JDK-8186374	emb-8u151	Weijun Wang	P2	Resolved	Fixed	b08
JDK-8190561	7u181	Ivan Gerasimov	P2	Resolved	Fixed	b01
JDK-8189395	7u171	Ivan Gerasimov	P2	Closed	Fixed	b07
JDK-8193998	openjdk7u	Weijun Wang	P2	Resolved	Fixed	master

Currently keytool warns about weak signature algorithms used by a certificate. However, if that certificate is in cacerts it should not be an issue. In fact, the certificate is pre-validated and we don't check the signature at all in Java.

backported by

JDK-8178260 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8185664 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8185973 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8186374 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8188699 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8189508 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8189567 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8190561 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8192619 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8193998 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8197350 keytool should not warn if signature algorithm used in cacerts is weak

Resolved

JDK-8185332 keytool should not warn if signature algorithm used in cacerts is weak

Closed

JDK-8189395 keytool should not warn if signature algorithm used in cacerts is weak

Closed

relates to

JDK-8171319 keytool should print out warnings when reading or generating cert/cert req using weak algorithms

Closed

JDK-8177760 keytool can use -trustcacerts for commands other than -importcert

Closed

JDK-8181737 Support secret keys and trusted certs in PKCS12 keystore

Resolved

(8 backported by, 3 relates to)

Assignee:: Weijun Wang

Reporter:: Weijun Wang

Votes:: 0 Vote for this issue

Watchers:: 9 Start watching this issue

Created:: 2017-03-24 17:33

Updated:: 2018-02-07 17:30

Resolved:: 2017-03-29 16:33

Details

Backports

Description

Attachments

Issue Links

Activity

People

Dates