JDK-6847026 : keytool should be able to generate certreq and cert without subject name
- Type: Enhancement
- Component: security-libs
- Sub-Component: java.security
- Affected Version: 7
- Priority: P4
- Status: Resolved
- Resolution: Fixed
- OS: generic
- CPU: generic
- Submitted: 2009-06-02
- Updated: 2017-05-16
- Resolved: 2009-07-31
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 7 |
|---|
7 b72Fixed  |
Related Reports
|
Relates :
|
Description
A certificate's subject field is allowed to be empty if it has a subjectAlternativeName extension. keytool currently cannot generate a cert request or a cert without the subject field. The reason is that the subject field is determined at the -gekeypair time and never changed at -certreq or -gencert. Since the cert generated at -genkeypair is self-signed and a self-signed cert must have the subject field, we have no chance to specify the empty subject now.
Comments
|