Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8267599

Revert the change to the default PKCS12 macAlgorithm and macIterationCount props for 11u/8u/7u

    XMLWordPrintable

    Details

      Backports

        Description

        pkcs12 keystores created using JDK 11.0.12 or later can't be read by earlier JDK 11 versions.

        Calling keyStore.load() on file: file:trust.jks, type: PKCS12, password:password
        Exception in thread "main" java.io.IOException: Integrity check failed: java.security.NoSuchAlgorithmException: Algorithm HmacPBESHA256 not available
                at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2167)
                at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:222)
                at java.base/java.security.KeyStore.load(KeyStore.java:1479)
                at LoadKeyStore.main(LoadKeyStore.java:33)
        Caused by: java.security.NoSuchAlgorithmException: Algorithm HmacPBESHA256 not available
                at java.base/javax.crypto.Mac.getInstance(Mac.java:191)
                at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2145)
                ... 3 more

          Attachments

            Issue Links

              Activity

                People

                Assignee:
                coffeys Sean Coffey
                Reporter:
                shadowbug Shadow Bug
                Votes:
                0 Vote for this issue
                Watchers:
                10 Start watching this issue

                  Dates

                  Created:
                  Updated:
                  Resolved: