JDK-8073430 : Deprecate security APIs that have been superseded
  • Type: Enhancement
  • Component: security-libs
  • Affected Version: 9
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2015-02-18
  • Updated: 2017-11-03
  • Resolved: 2015-03-10
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 9
9 b55Fixed
Related Reports
Duplicate :  
JDK-8145370 - Deprecate SSLSession.getPeerCertificateChain method
Relates :  
JDK-8074531 - Remove javax.security.cert.X509Certificate usage in internal networking packages
Relates :  
JDK-8157712 - Deprecate the javax.security.cert and com.sun.net.ssl APIs with forRemoval=true
Relates :  
JDK-8144784 - Remove @Deprecated annotation from java.security.acl, javax.security.cert and com.sun.jarsigner packages
Relates :  
JDK-8157055 - consider unified release notes for deprecated APIs
Relates :  
JDK-8157847 - Deprecate the java.security.acl API with forRemoval=true
Sub Tasks
JDK-8174143 :  
Release Note: Deprecate security APIs that have been superseded - Closed
Description
These packages have not been been officially deprecated, but they have been superseded by replacements for a long time:

- java.security.acl (superseded by java.security.Policy and related classes since 1.2)
- javax.security.cert (superseded by java.security.cert since 1.4)

They should be deprecated.  We should also deprecate the following methods in classes in javax.net.ssl which return javax.security.cert.X509Certificate types:

  - HandshakeCompletedEvent.getPeerCertificateChain
  - SSLSession.getPeerCertificateChain