8354469: Keytool exposes the password in plain text when command is piped using | grep

[nibjen]

This PR contains both JDK-8354469 and JDK-8366261 since earlier one depends on later fix.

Manually merged ModuleSelectionTest, Console, JdkConsoleImpl for minor conflicts on syntax.

Verified the required tests from tier1-tier3.

---

Progress

• Change must be properly reviewed (1 review required, with at least 1 Reviewer)
• JDK-8366261 needs maintainer approval
• Change must not contain extraneous whitespace
• Commit message must refer to an issue
• JDK-8354469 needs maintainer approval

Issues

• JDK-8354469: Keytool exposes the password in plain text when command is piped using | grep (Enhancement - P3)
• JDK-8366261: Provide utility methods for sun.security.util.Password (Enhancement - P4)

Reviewing

Using git

Checkout this PR locally:
$ git fetch https://git.openjdk.org/jdk25u.git pull/332/head:pull/332
$ git checkout pull/332

Update a local copy of the PR:
$ git checkout pull/332
$ git pull https://git.openjdk.org/jdk25u.git pull/332/head

Using Skara CLI tools

Checkout this PR locally:
$ git pr checkout 332

View PR using the GUI difftool:
$ git pr show -t 332

Using diff file

Download this PR as a diff file:
https://git.openjdk.org/jdk25u/pull/332.diff

Using Webrev

Link to Webrev Comment

[bridgekeeper]

👋 Welcome back nibjen! A progress list of the required criteria for merging this PR into master will be added to the body of your pull request. There are additional pull request commands available for use with this pull request.

[openjdk]

❗ This change is not yet ready to be integrated.
See the Progress checklist in the description for automated requirements.

[openjdk]

This backport pull request has now been updated with issue from the original commit.

[mlbridge]

Webrevs

• 00: Full (1c1bccd8)

[nibjen]

/issue JDK-8366261

[openjdk]

@nibjen
Adding additional issue to issue list: 8366261: Provide utility methods for sun.security.util.Password.

[wangweij]

The most important test is the newly added manual test EchoPassword.java. Please make sure it passes, ideally on all supported OSes.

[bridgekeeper]

@nibjen This pull request has been inactive for more than 4 weeks and will be automatically closed if another 4 weeks passes without any activity. To avoid this, simply issue a /touch or /keepalive command to the pull request. Feel free to ask for assistance if you need help with progressing this pull request towards integration!

[GoeLin]

Hi,
please close the PR and reopen a new one against jdk25u-dev. jdk25u is closed for normal backporting now. Request approval again, I will grant it if you point me to this PR.