[9] RFR 8163503: PKCS12 keystore cannot store non-X.509 certificates

Seán Coffey sean.coffey at oracle.com
Wed Aug 10 09:59:05 UTC 2016


It would be good if we can print the cert class type in the new 
exception if the instanceof check fails.

Regards,
Sean.

On 09/08/16 19:14, Vincent Ryan wrote:
> Please review this fix to improve the error handling for attempts to store a Certificate object in PKCS12 keystore.
> The PKCS12 keystore implementation supports storing only X509Certificate objects but the KeyStore API allows Certificate objects.
> This fix rejects attempts to store non-X.509 certificates and throws a KeyStoreException.
>
> Thanks.
>
> Bug: https://bugs.openjdk.java.net/browse/JDK-8163503
> Webrev: http://cr.openjdk.java.net/~vinnie/8163503/webrev.00/
>
>




More information about the security-dev mailing list