Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8353749

Improve security warning when using JKS or JCEKS keystores

XMLWordPrintable

      The current security warning should be changed/improved and simplified to note that:

       - the algorithms that the JKS and JCEKS keystores are outdated
       - the JKS and JCEKS types will be removed in a future release

      The proposed new warning is:

      "JKS uses outdated cryptographic algorithms and will be removed in a future release. Migrate to PKCS12 using:
      keytool -importkeystore -srckeystore <filename> -destkeystore <filename> -deststoretype pkcs12"

      - Substitute JKS with JCEKS for JCEKS keystores
      - Replace <filename> with the filename of the keystore

            hchao Haimay Chao
            mullan Sean Mullan
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: