JDK-8133622 : Unable to read some of the new https website
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Affected Version: 8u51
  • Priority: P4
  • Status: Closed
  • Resolution: Duplicate
  • OS: windows_7
  • CPU: x86_64
  • Submitted: 2015-07-15
  • Updated: 2015-08-14
  • Resolved: 2015-08-14
Related Reports
Duplicate :  
Description
FULL PRODUCT VERSION :


A DESCRIPTION OF THE PROBLEM :
Some protocols of new sites use DHParameterSpec  to the 4096-bit

for example ripple.com

Sun's JCE implementation imposes an artificial restriction on Diffie-Hellman primes. When passing a DHParameterSpec generated with a 4096-bit long modulus, class DHKeyPairGenerator will throw an exception indicating that "Prime size must be multiple of 64, and can only range from 512 to 2048 (inclusive)."

Please allow for module sizes beyond the 2048-bit limit.

The same problem has been fixed in redhat:

https://bugzilla.redhat.com/attachment.cgi?id=1012238&action=diff




REPRODUCIBILITY :
This bug can be reproduced always.


Comments
Duplicate of JDK-8072452.
14-08-2015

Pardeep, check if this can be reproduced.
16-07-2015