-
Bug
-
Resolution: Fixed
-
P3
-
24
-
b06
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8347565 | 24 | Weijun Wang | P3 | Resolved | Fixed | b32 |
Many keytool and jarsigner output messages mention keysizes but keysize does not apply to all keys, for example, the new ML-DSA keys. We should reformat these messages to be friendly with these new keys. For keys with a named parameter set, we only need to mention its name.
For example, when a ML-DSA key pair is generated, keytool currently shows
Generating -1 bit ML-DSA-44 key pair...
Or, a warning might show
<alias> uses a -1-bit ML-DSA-44 key which is considered a security risk. This key size will be disabled in a future update.
For example, when a ML-DSA key pair is generated, keytool currently shows
Generating -1 bit ML-DSA-44 key pair...
Or, a warning might show
<alias> uses a -1-bit ML-DSA-44 key which is considered a security risk. This key size will be disabled in a future update.
- backported by
-
JDK-8347565 Reformat keytool and jarsigner output for keys with a named parameter set
- Resolved
- links to
-
Commit(jdk24) openjdk/jdk/57c46ac2
-
Commit(master) openjdk/jdk/fa5ff82e
-
Review(jdk24) openjdk/jdk/23092
-
Review(master) openjdk/jdk/22735