[jdk21u-dev] RFR: 8354469: Keytool exposes the password in plain text when command is piped using | grep
Goetz Lindenmaier
goetz at openjdk.org
Fri Feb 20 09:59:36 UTC 2026
Edit of src/java.base/share/classes/sun/security/util/resources/security.properties
applied to sun/security/util/Resources.java as
"8345940: Migrate security-related resources from Java classes to properties files" not in 21.
test/jdk/sun/security/util/Resources/Usages.java
Trivial resolve as "8338411: Implement JEP 486: Permanently Disable the Security Manager" is not in 21.
The new test jdk/sun/security/tools/keytool/EchoPassword.java fails for passwords with non-ascii characters.
I think this is because many changes to pass the encoding around are missin in 21, especially https://bugs.openjdk.org/browse/JDK-8330276: Console methods with explicit Locale. Removed the part of the test using non-ascii.
-------------
Depends on: https://git.openjdk.org/jdk21u-dev/pull/2616
Commit messages:
- adapt test to 21
- backport a7a3a660e33fabc025ebe887f5605741be9ca8c3
Changes: https://git.openjdk.org/jdk21u-dev/pull/2617/files
Webrev: https://webrevs.openjdk.org/?repo=jdk21u-dev&pr=2617&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8354469
Stats: 304 lines in 6 files changed: 256 ins; 12 del; 36 mod
Patch: https://git.openjdk.org/jdk21u-dev/pull/2617.diff
Fetch: git fetch https://git.openjdk.org/jdk21u-dev.git pull/2617/head:pull/2617
PR: https://git.openjdk.org/jdk21u-dev/pull/2617
More information about the jdk-updates-dev
mailing list