Re: RFR 8153005: Upgrade the default PKCS12 encryption/MAC algorithms

[Sean Mullan]

On 11/17/20 4:38 PM, Weijun Wang wrote:


On Apr 10, 2020, at 5:03 AM, Weijun Wang <weijun.w...@oracle.com> wrote:

Please take a review at

           CSR : 8228481: Upgrade the default PKCS12 encryption/MAC algorithms
  Release note : https://bugs.openjdk.java.net/browse/JDK-8242069


I forget if the release note has been reviewed before. If not, please take a 
look.

I made a few small wording changes and added "keystore.pkcs12" for the 
security properties to look for more information.

--Sean


Thanks,
Max

        webrev : http://cr.openjdk.java.net/~weijun/8153005/webrev.00/

The default pkcs12 algorithms are bumped into PBE and HMAC based on SHA-256 and 
AES-256.

Thanks,
Max