Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8170131

Certificates not being blocked by jdk.tls.disabledAlgorithms property

    Details

    • Subcomponent:
    • Resolved In Build:
      b148
    • Verification:
      Verified

      Backports

        Description

        The jdk.tls.disabledAlgorithms property also applies to certificates, as the definition states in the java.security file:

        # For PKI-based peer authentication and key exchange mechanisms, this list
        # of disabled algorithms will also be checked during certification path
        # building and validation, including algorithms used in certificates, as
        # well as revocation information such as CRLs and signed OCSP Responses.
        # This is in addition to the jdk.certpath.disabledAlgorithms property above.

        This functionality is not currently working properly.

          Issue Links

            Activity

            Hide
            mullan Sean Mullan added a comment -
            Bug/regression caused by JDK-8140422. There were no prior regression tests for this functionality.
            Show
            mullan Sean Mullan added a comment - Bug/regression caused by JDK-8140422 . There were no prior regression tests for this functionality.
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/8d4eb53e3933
            User: mullan
            Date: 2016-12-02 19:24:20 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/8d4eb53e3933 User: mullan Date: 2016-12-02 19:24:20 +0000
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/8d4eb53e3933
            User: lana
            Date: 2016-12-07 19:33:44 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/8d4eb53e3933 User: lana Date: 2016-12-07 19:33:44 +0000
            Hide
            afomin Alexander Fomin added a comment -
            UR SQE OK to take a fix of a regression introduced in CPU17_01
            Show
            afomin Alexander Fomin added a comment - UR SQE OK to take a fix of a regression introduced in CPU17_01
            Hide
            xuelei Xue-Lei Fan added a comment - - edited
            See JDK-8170707 for an open issue of this update. The issue described in JDK-8170707 will be addressed within JDK-8160655.
            Show
            xuelei Xue-Lei Fan added a comment - - edited See JDK-8170707 for an open issue of this update. The issue described in JDK-8170707 will be addressed within JDK-8160655 .

              People

              • Assignee:
                mullan Sean Mullan
                Reporter:
                mullan Sean Mullan
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: