Change the default key manager to PKIX

XMLWordPrintable

    • Type: Enhancement
    • Resolution: Duplicate
    • Priority: P3
    • None
    • Affects Version/s: None
    • Component/s: security-libs

      The current key manager is SunX509, which is configured in the java.security. The SunX509 algorithm does not check of the local certificate, and there are known problems if there are multiple certificates in the local key store (see JDK-8199440). The PKIX algorithm should be preferred now so that the default key manager could be more robust.

      java.security:
      - ssl.KeyManagerFactory.algorithm=SunX509
      + ssl.KeyManagerFactory.algorithm=PKIX

        1.
        		 Update "Security Developer's Guide" documentation. Sub-task Closed Raymond Gallardo  

            Assignee:
            Artur Barashev
            Reporter:
            Xuelei Fan
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: