8b566aea47
PEMUtils would incorrectly fill the encryption password with zeros (the '\0' character) after decrypting a PKCS#8 key. Since PEMUtils did not take ownership of this password it should not zero it out because it does not know whether the caller will use that password array again. This is actually what PEMKeyConfig does - it uses the key encryption password as the password for the ephemeral keystore that it creates in order to build a KeyManager. Backport of: #55457 |
||
---|---|---|
.. | ||
cli | ||
core | ||
dissect | ||
geo | ||
grok | ||
nio | ||
plugin-classloader | ||
secure-sm | ||
ssl-config | ||
x-content | ||
build.gradle |