Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8267599

Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u

XMLWordPrintable

        pkcs12 keystores created using JDK 11.0.12 or later can't be read by earlier JDK 11 versions.

        Calling keyStore.load() on file: file:trust.jks, type: PKCS12, password:password
        Exception in thread "main" java.io.IOException: Integrity check failed: java.security.NoSuchAlgorithmException: Algorithm HmacPBESHA256 not available
                at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2167)
                at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:222)
                at java.base/java.security.KeyStore.load(KeyStore.java:1479)
                at LoadKeyStore.main(LoadKeyStore.java:33)
        Caused by: java.security.NoSuchAlgorithmException: Algorithm HmacPBESHA256 not available
                at java.base/javax.crypto.Mac.getInstance(Mac.java:191)
                at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2145)
                ... 3 more

              coffeys Sean Coffey
              shadowbug Shadow Bug
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated:
                Resolved: