src/java.base/share/conf/security/java.security
branchJDK-8145252-TLS13-branch
changeset 56807 b9e374d0534f
parent 56542 56aaa6cb3693
parent 50722 bc104aaf24e9
equal deleted inserted replaced
56806:32a737f51e37 56807:b9e374d0534f
  1025 # CORBA ORBIorTypeCheckRegistryFilter
  1025 # CORBA ORBIorTypeCheckRegistryFilter
  1026 # Type check enhancement for ORB::string_to_object processing
  1026 # Type check enhancement for ORB::string_to_object processing
  1027 #
  1027 #
  1028 # An IOR type check filter, if configured, is used by an ORB during
  1028 # An IOR type check filter, if configured, is used by an ORB during
  1029 # an ORB::string_to_object invocation to check the veracity of the type encoded
  1029 # an ORB::string_to_object invocation to check the veracity of the type encoded
  1030 # in the ior string. 
  1030 # in the ior string.
  1031 #
  1031 #
  1032 # The filter pattern consists of a semi-colon separated list of class names.
  1032 # The filter pattern consists of a semi-colon separated list of class names.
  1033 # The configured list contains the binary class names of the IDL interface types 
  1033 # The configured list contains the binary class names of the IDL interface types
  1034 # corresponding to the IDL stub class to be instantiated.
  1034 # corresponding to the IDL stub class to be instantiated.
  1035 # As such, a filter specifies a list of IDL stub classes that will be
  1035 # As such, a filter specifies a list of IDL stub classes that will be
  1036 # allowed by an ORB when an ORB::string_to_object is invoked.
  1036 # allowed by an ORB when an ORB::string_to_object is invoked.
  1037 # It is used to specify a white list configuration of acceptable
  1037 # It is used to specify a white list configuration of acceptable
  1038 # IDL stub types which may be contained in a stringified IOR
  1038 # IDL stub types which may be contained in a stringified IOR
  1057 # The filter pattern uses the same format as jdk.serialFilter. The default
  1057 # The filter pattern uses the same format as jdk.serialFilter. The default
  1058 # pattern allows java.lang.Enum, java.security.KeyRep, java.security.KeyRep$Type,
  1058 # pattern allows java.lang.Enum, java.security.KeyRep, java.security.KeyRep$Type,
  1059 # and javax.crypto.spec.SecretKeySpec and rejects all the others.
  1059 # and javax.crypto.spec.SecretKeySpec and rejects all the others.
  1060 jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep;\
  1060 jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep;\
  1061   java.base/java.security.KeyRep$Type;java.base/javax.crypto.spec.SecretKeySpec;!*
  1061   java.base/java.security.KeyRep$Type;java.base/javax.crypto.spec.SecretKeySpec;!*
       
  1062 
       
  1063 #
       
  1064 # Enhanced exception message text
       
  1065 #
       
  1066 # By default, socket exception messages do not include potentially sensitive
       
  1067 # information such as hostnames or port numbers. This property may be set to one
       
  1068 # or more values, separated by commas, and with no white-space. Each value
       
  1069 # represents a category of enhanced information. Currently, the only category defined
       
  1070 # is "hostInfo" which enables more detailed information in the IOExceptions
       
  1071 # thrown by java.net.Socket and also the socket types in the java.nio.channels package.
       
  1072 # The setting in this file can be overridden by a system property of the same name
       
  1073 # and with the same syntax and possible values.
       
  1074 #jdk.net.includeInExceptions=hostInfo