JDK-6656520 : Loading cacerts file from running JRE directory (JRE 1.4.2)
  • Type: Enhancement
  • Component: deploy
  • Sub-Component: plugin
  • Affected Version: 6u10
  • Priority: P2
  • Status: Resolved
  • Resolution: Fixed
  • OS: windows_nt
  • CPU: x86
  • Submitted: 2008-01-29
  • Updated: 2010-09-17
  • Resolved: 2008-04-02
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
Other JDK 6 JDK 7
5.0u16Fixed 6u7 b01Fixed 7Fixed
Related Reports
Relates :  
JDK-6656050 - Add AOL Root CA #2 to JDK
Description
Using JRE5 or JRE6 release, Java webstart application can force to use old JRE, such as JRE 1.4.2_15 in jnlp file, in current design, we are still loading cacerts file from JRE5 or JRE 6 directory, not JRE 1.4.2_15.

With new certificate come from AOL has been added into cacerts file in JRE 5 and JRE 6, the JSSE api in JRE 1.4.2 can't parse this new certificate in cacerts file (lengthn > 4k), therefore the application will failed to load during loading cacerts file, the following exception will be thrown:

java.secutrity.cert.CertificateParsingException in 5.0u15-b02

java.security.cert.CertificateParsingException: java.io.IOException
subject key, Unknown key spec, Invalid RSA modulus size.
Comments
EVALUATION We will load cacerts file from JRE1.4.2 instead of JRE 5 and JRE 6.
29-01-2008