RFR: 8353749: Improve security warning when using JKS or JCEKS keystores [v2]

Hai-May Chao hchao at openjdk.org
Thu Nov 13 07:50:02 UTC 2025


On Fri, 10 Oct 2025 15:31:09 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> Do we need to add a warning at `store`? For example, someone `getInstance("JKS")` and `load(null, null)`, and finally `store` it.

Added warning at engineStore(), and added a testcase for this scenario.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/27624#issuecomment-3526137462


More information about the security-dev mailing list