Need to define a standard algorithm name for KeyManagerFactory.getInstance(String algorithm). SunJSSE provider defines "SunX509" and "NewSunX509" algorithms, but none of them is exported as a standard algorithm name. The default algorithm may not always meets the customer requirements, it's better to define a standard algorithm. It is required that the implementation of the standard algorithm manages X.509 certificate-based key pairs for local side authentication according to the rules defined by the IETF PKIX working group in RFC 3280 or its successor, and supports initialization using KeyStores or javax.net.ssl.KeyStoreBuilderParameters.
|