RFR: 8255552: Add DES/3DES/MD5 to jdk.security.legacyAlgorithms [v2]

Hai-May Chao hchao at openjdk.java.net
Thu Apr 28 06:46:35 UTC 2022


> Please review these changes to add DES/3DES/MD5 to `jdk.security.legacyAlgorithms` security property, and to add the legacy algorithm constraint checking to `keytool` commands that are associated with secret key entries stored in the keystore. These `keytool` commands are -genseckey, -importpass, -list, and -importkeystore. As a result, `keytool` will be able to generate warnings when it detects that the secret key based algorithms and PBE based Mac and cipher algorithms are weak. Also removes the "This algorithm will be disabled in a future update.” from the existing warnings for the asymmetric keys/certificates.
> Will also file a CSR.

Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision:

  SecretKeyConstraintsParameters subclass created and property description updated

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/8300/files
  - new: https://git.openjdk.java.net/jdk/pull/8300/files/5a821bcd..2079c60b

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=8300&range=01
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=8300&range=00-01

  Stats: 72 lines in 5 files changed: 41 ins; 20 del; 11 mod
  Patch: https://git.openjdk.java.net/jdk/pull/8300.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/8300/head:pull/8300

PR: https://git.openjdk.java.net/jdk/pull/8300



More information about the security-dev mailing list