diff --git a/src/java.base/share/classes/java/security/doc-files/debug-system-property.html b/src/java.base/share/classes/java/security/doc-files/debug-system-property.html new file mode 100644 index 00000000000..4ea34252b3c --- /dev/null +++ b/src/java.base/share/classes/java/security/doc-files/debug-system-property.html @@ -0,0 +1,193 @@ + + + + + + The java.security.debug system property + + + +

{@systemProperty java.security.debug}

+

To monitor security access, you can set the java.security.debug + system property, which determines what trace messages are printed during + execution. The value of the property is one or more options separated by a + comma. +

+ +

Printing Thread and Timestamp Information

+

+ You can append the following strings to any option specified in the + java.security.debug system property to print additional + information: +

+

+ For example, to add thread, caller, and timestamp information to all + debugging output, set the java.security.debug system property + on the command line as follows: + 

java -Djava.security.debug=all+thread+timestamp MyApp
+ +

The following table lists the java.security.debug options:

+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Security Debug Options
OptionDescription
allTurn on all the debugging options
certpathTurns on debugging for the PKIX CertPathValidator and + CertPathBuilder implementations. The following sub-options + can be used with the certpath option: +
    +
  • ocsp: Dump OCSP protocol exchanges
    • +
  • verbose: A hexadecimal dump of the OCSP + request and response bytes is displayed.
    • +
+
configfileJAAS (Java Authentication and Authorization Service) configuration file loading
configparserJAAS configuration file parsing
gssloginconfigJava GSS (Generic Security Services) login configuration file debugging
jarJAR file verification
jcaJCA engine class debugging
KeyStoreKeyStore debugging
logincontextLoginContext results
pcscJava Smart Card I/O and SunPCSC provider debugging
pkcs11PKCS11 session manager debugging
pkcs11keystorePKCS11 KeyStore debugging
pkcs12PKCS12 KeyStore debugging
propertiesjava.security configuration file debugging
providerSecurity provider debugging. The following sub-option can be used + with the provider option: engine=(engines) + : The output is displayed only for a specified list of one or more JCA + engines, separated by a comma. The supported values for (engines) are: +
    +
  • Cipher
    • +
  • KDF
    • +
  • KeyAgreement
    • +
  • KeyGenerator
    • +
  • KeyPairGenerator
    • +
  • KeyStore
    • +
  • Mac
    • +
  • MessageDigest
    • +
  • SecureRandom
    • +
  • Signature
    • +
+
securerandomSecureRandom debugging
sunpkcs11SunPKCS11 provider debugging
tsTimestamping debugging
x509X.509 certificate debugging. The following sub-option can be used + with the X.509 option. +
    +
  • ava: Embed non-printable/non-escaped + characters in AVA components as hex strings
    • +
+
+ + diff --git a/src/java.base/share/classes/java/security/package-info.java b/src/java.base/share/classes/java/security/package-info.java index b887d5c17a3..fafdca73801 100644 --- a/src/java.base/share/classes/java/security/package-info.java +++ b/src/java.base/share/classes/java/security/package-info.java @@ -1,5 +1,5 @@ /* - * Copyright (c) 1998, 2024, Oracle and/or its affiliates. All rights reserved. + * Copyright (c) 1998, 2025, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it @@ -71,6 +71,12 @@ * * * + *

Additional Specification

+ * + * * @spec security/standard-names.html Java Security Standard Algorithm Names * @since 1.1 */