comparison src/share/lib/security/java.security-macosx @ 12000:8d36d0b503ba

8139565: Restrict certificates with DSA keys less than 1024 bits Reviewed-by: xuelei
author robm
date Wed, 07 Sep 2016 17:01:56 +0100
parents 55e37dab57a1
children 4c48191b287f
comparison
equal deleted inserted replaced
57:8fed54f2c1b3 59:d14fe059b692
482 # 482 #
483 # Example: 483 # Example:
484 # jdk.certpath.disabledAlgorithms=MD2, DSA, RSA keySize < 2048 484 # jdk.certpath.disabledAlgorithms=MD2, DSA, RSA keySize < 2048
485 # 485 #
486 # 486 #
487 jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024 487 jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
488 DSA keySize < 1024
488 489
489 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security 490 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security
490 # (SSL/TLS) processing 491 # (SSL/TLS) processing
491 # 492 #
492 # In some environments, certain algorithms or key lengths may be undesirable 493 # In some environments, certain algorithms or key lengths may be undesirable