https://issues.apache.org/bugzilla/show_bug.cgi?id=56357

--- Comment #7 from Milamber <[email protected]> ---

For reference:

http://www.oracle.com/technetwork/java/javase/7u40-relnotes-2004172.html

Default x.509 Certificates Have Longer Key Length

Starting from 7u40, the use of x.509 certificates with RSA keys less than 1024
bits in length is restricted. This restriction is applied via the Java Security
property, jdk.certpath.disabledAlgorithms. The default value of
jdk.certpath.disabledAlgorithms is now as follows:
jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024

In order to avoid the compatibility issue, users who use X.509 certificates
with RSA keys less than 1024 bits, are recommended to update their certificates
with stronger keys. As a workaround, at their own risk, users can adjust the
key size to permit smaller key sizes through the security property
jdk.certpath.disabledAlgorithms.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to