Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8353749

Improve security warning when using JKS or JCEKS keystores

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Unresolved
    • Icon: P3 P3
    • 26
    • None
    • security-libs
    • None

      The current security warning should be changed/improved and simplified to note that:

       - the algorithms that the JKS and JCEKS keystores are outdated
       - the JKS and JCEKS types will be removed in a future release

      The proposed new warning is:

      "JKS uses outdated cryptographic algorithms and will be removed in a future release. Migrate to PKCS12 using:
      keytool -importkeystore -srckeystore <filename> -destkeystore <filename> -deststoretype pkcs12"

      - Substitute JKS with JCEKS for JCEKS keystores
      - Replace <filename> with the filename of the keystore

            hchao Haimay Chao
            mullan Sean Mullan
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: