Re: Keytool does not agree with RFC 8410

2021-02-01 Thread Wei-Jun Wang
Thanks. I also noticed ‘openssl x509’ has a -force_pubkey for this case. We’ll think about what is the best we can do. —Max > On Feb 1, 2021, at 11:23 AM, Anders Rundgren > wrote: > > On 2021-02-01 16:01, Wei-Jun Wang wrote: >>> On Feb 1, 2021, at 2:32 AM, Anders Rundgren >>> wrote: >>> >>

Re: Keytool does not agree with RFC 8410

2021-02-01 Thread Anders Rundgren
On 2021-02-01 16:01, Wei-Jun Wang wrote: On Feb 1, 2021, at 2:32 AM, Anders Rundgren wrote: On 2021-01-31 20:00, Wei-Jun Wang wrote: https://bugs.openjdk.java.net/browse/JDK-8260693 filed. Thanx! In the bug report you also write: We'll also need a way to generate this kind of certifi

Re: Keytool does not agree with RFC 8410

2021-02-01 Thread Wei-Jun Wang
> On Feb 1, 2021, at 2:32 AM, Anders Rundgren > wrote: > > On 2021-01-31 20:00, Wei-Jun Wang wrote: >> https://bugs.openjdk.java.net/browse/JDK-8260693 filed. > > Thanx! > In the bug report you also write: > >We'll also need a way to generate this kind of certificate (or certreq). >Th

Re: Keytool does not agree with RFC 8410

2021-01-31 Thread Anders Rundgren
On 2021-01-31 20:00, Wei-Jun Wang wrote: https://bugs.openjdk.java.net/browse/JDK-8260693 filed. Thanx! In the bug report you also write: We'll also need a way to generate this kind of certificate (or certreq). There is no signature algorithm on XDH and we need to use EdDSA instead.

Re: Keytool does not agree with RFC 8410

2021-01-31 Thread Wei-Jun Wang
https://bugs.openjdk.java.net/browse/JDK-8260693 filed. Thanks, Max > On Jan 31, 2021, at 2:12 AM, Anders Rundgren > wrote: > > Since the JDK bug report tool does not include "keytool" I posted this here. > > Keytool for JDK 15 reports "Subject Public Key Algorithm: XDH key of unknown > size

Keytool does not agree with RFC 8410

2021-01-30 Thread Anders Rundgren
Since the JDK bug report tool does not include "keytool" I posted this here. Keytool for JDK 15 reports "Subject Public Key Algorithm: XDH key of unknown size" for a certificate  containing the following public key: 148: SEQUENCE {  150:   SEQUENCE {  152: OBJECT IDENTIFIER X255