JDK-6415696 : KeyTool deletes alias entry when -changealias used for Windows-My Sub Store of MSCAPI KeyStore
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 6
  • Priority: P3
  • Status: Closed
  • Resolution: Fixed
  • OS: solaris,windows_nt
  • CPU: x86,sparc
  • Submitted: 2006-04-20
  • Updated: 2010-05-10
  • Resolved: 2006-05-30
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6
6 b86Fixed
Related Reports
Duplicate :  
JDK-6324932 - MS CAPI keystore support (Keytool) - failed with improper return codes & exception messages
Description
=====STORING CERTIFICATES INTO CAPI KEYSTORE=====
Before changing the alias we insert a cert into Windows-MY store and make sure insertion is clean (verify with the list command)

Firing KeyTool command as under : 
Y:/xml/CC_DTF/knight_ws/exec/srikar_mustang_dtf-KeytoolCAPI-2006-04-19-02-10-39-0032/jdk//bin//keytool.exe -J-Djava.security.manager -J-Djava.security.policy=KeytoolCAPI.policy -keystore NONE -storetype Windows-My -importcert -v -noprompt -alias srikar_new_cert_build3 -file srikarsagi.cer.data 


=====VERIFICATION OF THE CERT INSERTION=====
Listing Alias "srikar_new_cert_build3" Entry in Windows-My Store

Firing KeyTool Command to Display Alias: srikar_new_cert_build3 as under: 

Y:/xml/CC_DTF/knight_ws/exec/srikar_mustang_dtf-KeytoolCAPI-2006-04-19-02-10-39-0032/jdk//bin//keytool.exe -J-Djava.security.manager -J-Djava.security.policy=KeytoolCAPI.policy -keystore NONE -storetype Windows-My -list -alias srikar_new_cert_build3 -rfc
Alias name: srikar_new_cert_build3
Entry type: trustedCertEntry

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


=========================CHANGING CERTIFICATE ALIAS IN CAPI KEYSTORE=============================
Original Alias Name: srikar_new_cert_build3  
New Alias Name: srikar_changed_name_cert_build3

Firing KeyTool command as under : 
Y:/xml/CC_DTF/knight_ws/exec/srikar_mustang_dtf-KeytoolCAPI-2006-04-19-02-10-39-0032/jdk//bin//keytool.exe -J-Djava.security.manager -J-Djava.security.policy=KeytoolCAPI.policy -keystore NONE   -storetype  Windows-My -changealias -alias srikar_new_cert_build3 -destalias srikar_changed_name_cert_build3


=====VERIFICATION OF THE CHANGE ALIAS=====
Verifying Old Alias, existence
Listing Alias "srikar_new_cert_build3" Entry in Windows-My Store

Firing KeyTool Command to Display Alias: srikar_new_cert_build3 as under: 
Y:/xml/CC_DTF/knight_ws/exec/srikar_mustang_dtf-KeytoolCAPI-2006-04-19-02-10-39-0032/jdk//bin//keytool.exe -J-Djava.security.manager -J-Djava.security.policy=KeytoolCAPI.policy -keystore NONE   -storetype  Windows-My -list -alias srikar_new_cert_build3 -rfc
keytool error: java.lang.Exception: Alias <srikar_new_cert_build3> does not exist

Verifying New and changed Alias, existence
Listing Alias "srikar_changed_name_cert_build3" Entry in Windows-My Store

Firing KeyTool Command to Display Alias: srikar_changed_name_cert_build3 as under: 
Y:/xml/CC_DTF/knight_ws/exec/srikar_mustang_dtf-KeytoolCAPI-2006-04-19-02-10-39-0032/jdk//bin//keytool.exe -J-Djava.security.manager -J-Djava.security.policy=KeytoolCAPI.policy -keystore NONE -storetype  Windows-My -list -alias srikar_changed_name_cert_build3 -rfc
keytool error: java.lang.Exception: Alias <srikar_changed_name_cert_build3> does not exist


===========JDK BUILD USED=============================
"1.6.0-beta2"
untime Environment (build 1.6.0-beta2-b80)
TM) Client VM (build 1.6.0-beta2-b80, mixed mode)
=======================================================

THE MUSTANG BUILDS ARE ACCESSED FROM /net/koori.sfbay/onestop/jdk/6.0/latest/binaries/windows-i586 (with a mapping)
Comments
EVALUATION The -changealias operation comprises 3 sub-operations: duplicate entry, rename new entry and delete old entry. Must ensure that when a duplicated entry is being deleted that only the old entry is removed (and not the new entry).
22-05-2006