There is a bug on Solaris on DSA keypair generation, and DSA related test has a 1/256 probability to fail at signature verification. This fix updates all non algorithm related "keytool -genkeypair" calls to using RSA. Please take a review: http://cr.openjdk.java.net/~weijun/8027026/webrev.00 Thanks Max