On Wed, 11 May 2022 21:55:45 GMT, Weijun Wang <wei...@openjdk.org> wrote:
> This code change allows one entering "." at a distinguished name prompt to > skip a sub-component when running `keytool -genkeyapir`. Several new resource > strings are added. > > There is no detailed description in `keytool.html`, so I think there's no > need to update it. > > I'll file a CSR to describe the behavior change. > > Here is an example after this change: > > $ keytool -genkeypair -keystore ks -storepass changeit -alias b -keyalg EC > Enter the distinguished name. Provide a single dot (.) to leave a > sub-component empty or press ENTER to use the default value in braces. > What is your first and last name? > [Unknown]: . > What is the name of your organizational unit? > [Unknown]: . > What is the name of your organization? > [Unknown]: . > What is the name of your City or Locality? > [Unknown]: . > What is the name of your State or Province? > [Unknown]: . > What is the two-letter country code for this unit? > [Unknown]: . > At least one field must be provided. Enter again. > Enter the distinguished name. Provide a single dot (.) to leave a > sub-component empty or press ENTER to use the default value in braces. > What is your first and last name? > []: Duke > What is the name of your organizational unit? > []: > What is the name of your organization? > []: > What is the name of your City or Locality? > []: > What is the name of your State or Province? > []: > What is the two-letter country code for this unit? > []: > Is CN=Duke correct? > [no]: yes > > Generating 384 bit EC (secp384r1) key pair and self-signed certificate > (SHA384withECDSA) with a validity of 90 days > for: CN=Duke > > In the first round, "." is entered for all fields and keytool rejected it. In > the second round, CN is entered but the others are unchanged (just type > enter, because they are already entered previously). At the end, the name is > "CN=Duke". This pull request has now been integrated. Changeset: f4f1dddf Author: Weijun Wang <wei...@openjdk.org> URL: https://git.openjdk.java.net/jdk/commit/f4f1dddfef6ed3206763bb0e441aebd06a23d6fe Stats: 128 lines in 4 files changed: 91 ins; 3 del; 34 mod 8284194: Allow empty subject fields in keytool Reviewed-by: jnimeh, hchao ------------- PR: https://git.openjdk.java.net/jdk/pull/8667
