Summary

There was a small typo in the productions for the jdk.tls.keyLimits entry in the java.security file. This CSR will address this deficiency.

Problem

The java.security file currently mentions WeakKeyLimit instead of KeyLimit.

# The syntax for the property is described below:
# KeyLimits:
# " KeyLimit { , KeyLimit } "
#
# WeakKeyLimit:
# AlgorithmName Action Length
#
# AlgorithmName:
# A full algorithm transformation.
#
# Action:
# KeyUpdate
#
# Length:
# The amount of encrypted data in a session before the Action occurs
# This value may be an integer value in bytes, or as a power of two, 2^29.

Solution

Replace WeakKeyLimit with KeyLimit.

Specification

diff --git a/src/java.base/share/conf/security/java.security b/src/java.base/share/conf/security/java.security
index 5149edba0e5..4c0f4cda13d 100644
--- a/src/java.base/share/conf/security/java.security
+++ b/src/java.base/share/conf/security/java.security
@@ -892,7 +892,7 @@ jdk.tls.legacyAlgorithms=NULL, anon, RC4, DES, 3DES_EDE_CBC
 #   KeyLimits:
 #       " KeyLimit { , KeyLimit } "
 #
-#   WeakKeyLimit:
+#   KeyLimit:
 #       AlgorithmName Action Length
 #
 #   AlgorithmName: