On 8202598: [linux] keytool -certreq inconsistent with platform line.separator

Severin Gehwolf sgehwolf at redhat.com
Wed Jun 27 08:01:09 UTC 2018


Hi Max,

On Wed, 2018-06-27 at 09:15 +0800, Weijun Wang wrote:
> Hi Severin and/or Andrew
> 
> I'm going through all security bugs with JDK 11 in affected versions and noticed this one:
> 
>    8202598: [linux] keytool -certreq inconsistent with platform line.separator
>    https://bugs.openjdk.java.net/browse/JDK-8202598
> 
> What kind of interop issue have you observed? IMHO, \r\n is legal in a PEM file.

All we know is that this breaks interop with tools on Linux/Unix which
don't expect \r\n in PEM files.

> Also, you mentioned a patch in the comment. Can I take a look?

I've posted a link to the JDK 8 patch in the bug report.

Thanks,
Severin



More information about the security-dev mailing list