RFR 8212003: Obsoleting the default keytool -keyalg option

Weijun Wang weijun.wang at oracle.com
Thu Oct 18 04:34:40 UTC 2018



> On Oct 18, 2018, at 10:34 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
> 
> Please review the code change and CSR for 
> 
>   JBS: https://bugs.openjdk.java.net/browse/JDK-8212003
> 
> at
> 
>   webrev: http://cr.openjdk.java.net/~weijun/8212003/webrev.00/
>   CSR: https://bugs.openjdk.java.net/browse/JDK-8212111
> 
> When -keyalg is not provided for -genkeypair or -genseckey, keytool will print out a warning. We plan to make this an error in a future release.
> 
> A new regression test ObsoleteKeyalg.java added. "-keyalg DSA" or "-keyalg DES" added to other tests.
> 
> A Mach5 job on tier1 and tier2 running now.

Test complete. Only one test failed but it's unrelated and a known failure.

BTW, I also run a Mach5 job without the test change. Two related tests failed (WeakAlg.java and KeyToolTest.java), both because seeing unexpected "Warning" text in the output. Maybe the tests should have checked a more precise "Warning: XYZ".

Thanks
Max

> 
> Thanks
> Max
> 




More information about the security-dev mailing list