Re: Disabled brainpool curves

2022-12-14 Thread benjamin.marwell
Yes, I know that. For the reasons I have given, I would like to request to remove brainpool 512 from that list for all users. There is no good reason to disable that cipher on JDK 8. It is not insecure, that has been debunked by the BSI. Any chance for this to happen? - Ben On 13.12.22, 18:5

Re: Disabled brainpool curves

2022-12-13 Thread Anthony Scarpino
Additionally JDK-8235540, was a java.security configuration change for JDK7 and JDK8. If you want to re-enable brainpool curves, change the java.disabled.namedCurves and/or jdk.[tls|certpath|jar].disabledAlgorithms properties in the java.security. One policy won't fit everyone's needs, tha

Re: Disabled brainpool curves

2022-12-13 Thread Sean Mullan
On 12/13/22 2:39 AM, benjamin.marw...@f-i.de wrote: Hi everyone! I just stumbled over “Disable weak named curves”, e.g. • https://bugs.openjdk.org/browse/JDK-8235540 • http://cr.openjdk.java.net/~alexsch/sercher/8233228/webrev.00/src/share/lib/security/java.security-aix.udiff.html Interest