Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8354469 Keytool exposes the password in plain text when command is piped using | grep
  3. JDK-8369945

Release Note: Enhanced keytool Password Handling When Output Is Redirected

XMLWordPrintable

    • Icon: Sub-task Sub-task
    • Resolution: Delivered
    • Icon: P3 P3
    • 26
    • None
    • security-libs

      The `keytool` command reads passwords from the system console to prevent them from being displayed on the screen. However, the console is usually available only when both the standard input and output streams are not redirected. Previously, if the standard output stream was redirected into a file or another command, the console was unavailable and the input password was echoed on the screen. This enhancement improves password handling to ensure that the password is not displayed on the screen even if the standard output stream is redirected. This enhancement has also been made to the `jarsigner` command and the JAAS `TextCallbackHandler` API.

            Unassigned Unassigned
            weijun Weijun Wang
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: