RELEASE NOTES: JDK openjdk8u342

Customizing PKCS12 keystore Generation

New system and security properties have been added to enable users to customize the generation of PKCS #12 keystores. This includes algorithms and parameters for key protection, certificate protection, and MacData. The detailed explanation and possible values for these properties can be found in the "PKCS12 KeyStore properties" section of the java.security file.

Also, support for the following SHA-2 based HmacPBE algorithms has been added to the SunJCE provider: HmacPBESHA224, HmacPBESHA256, HmacPBESHA384, HmacPBESHA512, HmacPBESHA512/224, HmacPBESHA512/256

New System Property to Disable Windows Alternate Data Stream Support in java.io.File

The Windows implementation of java.io.File allows access to NTFS Alternate Data Streams (ADS) by default. Such streams have a structure like “filename:streamname”. A system property jdk.io.File.enableADS has been added to control this behavior. To disable ADS support in java.io.File, the system property jdk.io.File.enableADS should be set to false (case ignored). Stricter path checking however prevents the use of special devices such as NUL:

Restoring Previous `user.dir` Property Behaviour

A change, JDK-8194154, was introduced in the 8u342 release of OpenJDK, causing the JDK to ignore attempts to set the user.dir property. While this change is suitable for a major release (it was originally introduced in the initial release of OpenJDK 11), changing the behaviour of such a property in an update release creates compatibility issues in software that relies on the behaviour in prior versions of OpenJDK 8. As a result, we have reverted this change in 8u345.