RFR: 8353749: Improve security warning when using JKS or JCEKS keystores [v2]

Weijun Wang weijun at openjdk.org
Fri Oct 10 15:33:35 UTC 2025


On Fri, 10 Oct 2025 07:20:20 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

>> This PR improves security warning when using JKS or JCEKS keystores.
>
> Hai-May Chao has updated the pull request incrementally with four additional commits since the last revision:
> 
>  - Updates with review comments
>  - Updates with review comments
>  - Revert changes to KeyStore.java
>  - Remove test TestOutdatedKeyStore.java

Do we need to add a warning at `store`? For example, someone `getInstance("JKS")` and `load(null, null)`, and finally `store` it.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/27624#issuecomment-3390788804


More information about the security-dev mailing list