JDK-8273236 : keytool does not accurately warn about algorithms that are disabled but have additional constraints
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P4
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2021-09-01
  • Updated: 2022-11-07
  • Resolved: 2022-01-26
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 17 JDK 19 JDK 8
11.0.18-oracleFixed 17.0.6-oracleFixed 19 b08Fixed 8u361Fixed
Related Reports
Blocks :  
JDK-8275887 - jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled
Relates :  
JDK-8265086 - jarsigner tool should display descriptive message when multiple constraints are specified
Description
keytool uses a simpler scheme to warn about algorithms that are disabled which does not take into account constraints such as `Usage` or `DenyAfter`.
Comments
Fix request [11u] I backport this for parity with 11.0.18-oracle. A change to security files, not trivial. I think we need to go along here, though. Not clean, I had to resolve. Test passes. SAP nighlty testing passed.
06-11-2022
A pull request was submitted for review. URL: https://git.openjdk.org/jdk11u-dev/pull/1497 Date: 2022-11-03 17:34:06 +0000
03-11-2022
Fix request [17u] I backport this for parity with 17.0.6-oracle. A change to security files, not trivial. I think we need to go along here, though. Clean backport, but to compile I had to do trivial changes. Test passes. SAP nightly testing passes.
16-10-2022
A pull request was submitted for review. URL: https://git.openjdk.org/jdk17u-dev/pull/789 Date: 2022-10-13 17:19:45 +0000
13-10-2022
Changeset: c2ee1b33 Author: Hai-May Chao <hchao@openjdk.org> Date: 2022-01-26 20:31:04 +0000 URL: https://git.openjdk.java.net/jdk/commit/c2ee1b33c37e6f2848dc8b3e5417b93b1dac1112
26-01-2022
A pull request was submitted for review. URL: https://git.openjdk.java.net/jdk/pull/7039 Date: 2022-01-12 02:15:45 +0000
12-01-2022