-
Bug
-
Resolution: Fixed
-
P4
-
8, 9, 10
-
b01
-
x86_64
-
windows_10
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8235113 | emb-8u241 | Raymond Gallardo | P4 | Resolved | Fixed | team |
A DESCRIPTION OF THE PROBLEM :
JDK-8149722 : JSSE TrustManagerFactory ignores deployment.system.security.cacerts
I have the same expectation that if an administrator defines security settings the should be honoured. Otherwise the documentation for the deployment.properties should clearly explain that the settings are just for Web Start security.
The tools like java control panel respect these settings and display the defined keystores but the runtime use hard coded paths or a insecure system property and ignore these settings.
REGRESSION : Last worked in version 8u172
FREQUENCY : always
I have the same expectation that if an administrator defines security settings the should be honoured. Otherwise the documentation for the deployment.properties should clearly explain that the settings are just for Web Start security.
The tools like java control panel respect these settings and display the defined keystores but the runtime use hard coded paths or a insecure system property and ignore these settings.
REGRESSION : Last worked in version 8u172
FREQUENCY : always
- backported by
-
JDK-8235113 JSSE TrustManagerFactory ignores custom value of deployment.system.security.cacerts property
- Resolved