United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
JDK-8062552 : Support keystore type detection for JKS and PKCS12 keystores

Details
Type:
Enhancement
Submit Date:
2014-10-30
Status:
Closed
Updated Date:
2017-05-17
Project Name:
JDK
Resolved Date:
2015-05-25
Component:
security-libs
OS:
Sub-Component:
java.security
CPU:
Priority:
P2
Resolution:
Fixed
Affected Versions:
8
Fixed Versions:
8u60 (b18)

Related Reports
Duplicate:
JDK-8129634 - Reading the cacerts file one byte at a time
Relates:
JDK-8044445 - JEP 229: Create PKCS12 Keystores by Default
Relates:
JDK-8136534 - Loading JKS keystore using non-null InputStream results in closed stream

Sub Tasks

Description
A mechanism to automatically detect a keystore type is required for the existing KeyStore API.

This is needed to ease the migration from JKS keystores to PKCS12 keystores without disturbing existing applications. The mechanism should allow keystore applications to interoperate with both keystore types without the need for any changes to application code.

Comments
Release Note comment:

Keystore Compatibility Mode

To aid interoperability, the Java keystore type JKS now supports keystore compatibility mode by default.
This mode enables JKS keystores to access both JKS and PKCS12 file formats. To disable keystore compatibility
mode set the Security property 'keystore.type.compat' to the string value 'false'.
2015-05-15


Hardware and Software, Engineered to Work Together