RFR: 8153005: Upgrade the default PKCS12 encryption/MAC algorithms [v2]

[Weijun Wang]

On Fri, 9 Oct 2020 00:04:17 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> Are you still planning, or is it possible to add a test for Windows 2019? Also, have you considered adding a test that
>> checks if the JDK can read OpenSSL PKCS#12 files and vice versa? Maybe we can do that later as a follow-on issue.
>> Otherwise, I will approve.
>
> I tried but cannot find a way to tell if a system is Windows Server 2016 or 2019. Their os.version is all 10.0. I've
> filed an enhancement at https://bugs.openjdk.java.net/browse/JDK-8254241 for it. That said, I did try running the test
> on a Windows Server 2019 using new algorithms and it succeeds.

There are existing tests reading openssl generated pkcs12 files in
https://github.com/openjdk/jdk/tree/master/test/jdk/sun/security/pkcs12/params, but I can add a new one using strong
algorithms.

-------------

PR: https://git.openjdk.java.net/jdk/pull/473