RFR: 8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints [v7]

Hai-May Chao hchao at openjdk.java.net
Wed Jan 26 17:43:12 UTC 2022


On Wed, 26 Jan 2022 14:30:13 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Reformat denyAfter date in exception message to YYYY-MM-DD
>
> src/java.base/share/classes/sun/security/tools/keytool/Main.java line 4920:
> 
>> 4918:                     String endSeparator = "; params date";
>> 4919:                     int endSepPos = eMessage.indexOf(endSeparator);
>> 4920:                     String denyAfterDate = eMessage.substring(startSepPos + startSeparator.length(),
> 
> I think you should catch `IndexOutOfBoundException` here, just in case, and bail out with your new error message "Unable.to.parse.denyAfter.string.in.exception.message".

Fixed.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7039



More information about the security-dev mailing list