JDK-8177569 : keytool should not warn if signature algorithm used in cacerts is weak
- Type: Bug
- Component: security-libs
- Sub-Component: java.security
- Affected Version: 9
- Priority: P2
- Status: Closed
- Resolution: Fixed
- Submitted: 2017-03-25
- Updated: 2018-02-08
- Resolved: 2017-03-29
The Version table provides details related to the release that this issue/RFE will be addressed.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.
To download the current JDK release, click here.
| JDK 10 | JDK 7 | JDK 8 | JDK 9 | Other |
|---|---|---|---|---|
10Fixed  |
7u171Fixed | 8u151Fixed |
9 b164Fixed |
openjdk7uFixed |
Related Reports
|
Relates :
|
|
|
Relates :
|
|
|
Relates :
|
Description
Currently keytool warns about weak signature algorithms used by a certificate. However, if that certificate is in cacerts it should not be an issue. In fact, the certificate is pre-validated and we don't check the signature at all in Java.
Comments
|