stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

8245665: Test WeakAlg.java should only make sure no warning for weak signature algorithms by keytool on root CA

Browse Source 
Reviewed-by: weijun
This commit is contained in:
Hai-May Chao 2020-05-23 14:49:55 +08:00
parent 2f80d69518
commit ccd7d70586
1 changed files with 4 additions and 4 deletions

8
test/jdk/sun/security/tools/keytool/WeakAlg.java

@ -433,9 +433,9 @@ public class WeakAlg {
// The following 2 commands still have a warning on why not using
// the -cacerts option directly.
kt("-list -keystore " + KeyStoreUtil.getCacerts())
.shouldNotContain("risk");
.shouldNotMatch("signature algorithm.*risk");
kt("-list -v -keystore " + KeyStoreUtil.getCacerts())
.shouldNotContain("risk");
.shouldNotMatch("signature algorithm.*risk");
// -printcert will always show warnings
kt("-printcert -file ca.cert")
@ -451,10 +451,10 @@ public class WeakAlg {
kt("-delete -alias d");
kt("-importcert -alias d -trustcacerts -file ca.cert", "no")
.shouldContain("Certificate already exists in system-wide CA")
.shouldNotContain("risk")
.shouldNotMatch("signature algorithm.*risk")
.shouldContain("Do you still want to add it to your own keystore?");
kt("-importcert -alias d -trustcacerts -file ca.cert -noprompt")
.shouldNotContain("risk")
.shouldNotMatch("signature algorithm.*risk")
.shouldNotContain("[no]");
// but not without -trustcacerts