Support version 1 cert generation

Wang Weijun weijun.wang at oracle.com
Tue May 17 04:44:42 UTC 2016


https://bugs.openjdk.java.net/browse/JDK-8157109 filed.

--Max

> On May 17, 2016, at 12:25 PM, Xuelei Fan <xuelei.fan at oracle.com> wrote:
> 
> Hi,
> 
> Keytool used to generate version 1 self-signed certificates.  Now it is
> mandatory to be version 3.  Default version 3 should be OK.  However, in
> some circumstances (for example for testing purpose), version 1
> self-signed certificate may still be useful.
> 
> It would be a low priority, but may be nice to add an option to support
> specified certificate version number for certificate generation.
> 
> Thanks,
> Xuelei




More information about the security-dev mailing list