diff src/share/lib/security/java.security-macosx @ 12000:8d36d0b503ba

8139565: Restrict certificates with DSA keys less than 1024 bits Reviewed-by: xuelei
author robm
date Wed, 07 Sep 2016 17:01:56 +0100
parents 55e37dab57a1
children 4c48191b287f
line wrap: on
line diff
--- a/src/share/lib/security/java.security-macosx	Tue Aug 30 13:50:33 2016 -0700
+++ b/src/share/lib/security/java.security-macosx	Wed Sep 07 17:01:56 2016 +0100
@@ -484,7 +484,8 @@
 #   jdk.certpath.disabledAlgorithms=MD2, DSA, RSA keySize < 2048
 #
 #
-jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024
+jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024, \
+    DSA keySize < 1024
 
 # Algorithm restrictions for Secure Socket Layer/Transport Layer Security
 # (SSL/TLS) processing