src/java.base/share/conf/security/java.security
changeset 50722 bc104aaf24e9
parent 49787 99b627637911
child 50768 68fa3d4026ea
child 56807 b9e374d0534f
equal deleted inserted replaced
50721:e541c1b68b89 50722:bc104aaf24e9
   991 # CORBA ORBIorTypeCheckRegistryFilter
   991 # CORBA ORBIorTypeCheckRegistryFilter
   992 # Type check enhancement for ORB::string_to_object processing
   992 # Type check enhancement for ORB::string_to_object processing
   993 #
   993 #
   994 # An IOR type check filter, if configured, is used by an ORB during
   994 # An IOR type check filter, if configured, is used by an ORB during
   995 # an ORB::string_to_object invocation to check the veracity of the type encoded
   995 # an ORB::string_to_object invocation to check the veracity of the type encoded
   996 # in the ior string. 
   996 # in the ior string.
   997 #
   997 #
   998 # The filter pattern consists of a semi-colon separated list of class names.
   998 # The filter pattern consists of a semi-colon separated list of class names.
   999 # The configured list contains the binary class names of the IDL interface types 
   999 # The configured list contains the binary class names of the IDL interface types
  1000 # corresponding to the IDL stub class to be instantiated.
  1000 # corresponding to the IDL stub class to be instantiated.
  1001 # As such, a filter specifies a list of IDL stub classes that will be
  1001 # As such, a filter specifies a list of IDL stub classes that will be
  1002 # allowed by an ORB when an ORB::string_to_object is invoked.
  1002 # allowed by an ORB when an ORB::string_to_object is invoked.
  1003 # It is used to specify a white list configuration of acceptable
  1003 # It is used to specify a white list configuration of acceptable
  1004 # IDL stub types which may be contained in a stringified IOR
  1004 # IDL stub types which may be contained in a stringified IOR
  1023 # The filter pattern uses the same format as jdk.serialFilter. The default
  1023 # The filter pattern uses the same format as jdk.serialFilter. The default
  1024 # pattern allows java.lang.Enum, java.security.KeyRep, java.security.KeyRep$Type,
  1024 # pattern allows java.lang.Enum, java.security.KeyRep, java.security.KeyRep$Type,
  1025 # and javax.crypto.spec.SecretKeySpec and rejects all the others.
  1025 # and javax.crypto.spec.SecretKeySpec and rejects all the others.
  1026 jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep;\
  1026 jceks.key.serialFilter = java.base/java.lang.Enum;java.base/java.security.KeyRep;\
  1027   java.base/java.security.KeyRep$Type;java.base/javax.crypto.spec.SecretKeySpec;!*
  1027   java.base/java.security.KeyRep$Type;java.base/javax.crypto.spec.SecretKeySpec;!*
       
  1028 
       
  1029 #
       
  1030 # Enhanced exception message text
       
  1031 #
       
  1032 # By default, socket exception messages do not include potentially sensitive
       
  1033 # information such as hostnames or port numbers. This property may be set to one
       
  1034 # or more values, separated by commas, and with no white-space. Each value
       
  1035 # represents a category of enhanced information. Currently, the only category defined
       
  1036 # is "hostInfo" which enables more detailed information in the IOExceptions
       
  1037 # thrown by java.net.Socket and also the socket types in the java.nio.channels package.
       
  1038 # The setting in this file can be overridden by a system property of the same name
       
  1039 # and with the same syntax and possible values.
       
  1040 #jdk.net.includeInExceptions=hostInfo