changeset 12586:102a5fec5011

8168861: AnchorCertificates uses hardcoded password for cacerts keystore Reviewed-by: ascarpino
author robm
date Fri, 18 Nov 2016 18:11:44 +0000
parents 448ee54864d3
children c35ad2aa6451
files src/share/classes/sun/security/util/AnchorCertificates.java
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/share/classes/sun/security/util/AnchorCertificates.java	Fri Nov 18 14:52:52 2016 +0000
+++ b/src/share/classes/sun/security/util/AnchorCertificates.java	Fri Nov 18 18:11:44 2016 +0000
@@ -56,7 +56,7 @@
                 try {
                     cacerts = KeyStore.getInstance("JKS");
                     try (FileInputStream fis = new FileInputStream(f)) {
-                        cacerts.load(fis, "changeit".toCharArray());
+                        cacerts.load(fis, null);
                         certs = new HashSet<>();
                         Enumeration<String> list = cacerts.aliases();
                         String alias;