Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8359956

Support algorithm constraints and certificate checks in SunX509 key manager

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Fixed
    • Icon: P4 P4
    • 26
    • None
    • security-libs
    • None

      SunX509 key manager should support the same certificate checks that are supported by PKIX key manager.

      Effectively there should be only 2 differences between 2 key managers:
      - PKIX supports multiple key stores through KeyStore.Builder interface while SunX509 supports only a single keystore.
      - SunX509 caches its whole key store on initialization thus improving performance. This means that subsequent modifications of the KeyStore have no effect on SunX509 KM, unlike PKIX .

        1.
        		 Update JDK Providers Documentation Sub-task Open Raymond Gallardo  

            abarashev Artur Barashev
            abarashev Artur Barashev
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: