> Please review these changes to add DES/3DES/MD5 to > `jdk.security.legacyAlgorithms` security property, and to add the legacy > algorithm constraint checking to `keytool` commands that are associated with > secret key entries stored in the keystore. These `keytool` commands are > -genseckey, -importpass, -list, and -importkeystore. As a result, `keytool` > will be able to generate warnings when it detects that the secret key based > algorithms and PBE based Mac and cipher algorithms are weak. Also removes the > "This algorithm will be disabled in a future update.” from the existing > warnings for the asymmetric keys/certificates. > Will also file a CSR.
Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision: Update per review comments ------------- Changes: - all: https://git.openjdk.java.net/jdk/pull/8300/files - new: https://git.openjdk.java.net/jdk/pull/8300/files/ac92a5f7..2fa72aa8 Webrevs: - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=8300&range=05 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=8300&range=04-05 Stats: 50 lines in 3 files changed: 35 ins; 1 del; 14 mod Patch: https://git.openjdk.java.net/jdk/pull/8300.diff Fetch: git fetch https://git.openjdk.java.net/jdk pull/8300/head:pull/8300 PR: https://git.openjdk.java.net/jdk/pull/8300