Please review the code change and CSR for JBS: https://bugs.openjdk.java.net/browse/JDK-8212003
at webrev: http://cr.openjdk.java.net/~weijun/8212003/webrev.00/ CSR: https://bugs.openjdk.java.net/browse/JDK-8212111 When -keyalg is not provided for -genkeypair or -genseckey, keytool will print out a warning. We plan to make this an error in a future release. A new regression test ObsoleteKeyalg.java added. "-keyalg DSA" or "-keyalg DES" added to other tests. A Mach5 job on tier1 and tier2 running now. Thanks Max