<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 12/8/15 9:49 AM, Cantor, Scott
wrote:<br>
</div>
<blockquote cite="mid:5D652755-0825-4EFA-9BCE-2719D8689F58@osu.edu"
type="cite">
<pre wrap="">On 12/8/15, 12:52 AM, "users on behalf of Yavor Yanakiev" <a class="moz-txt-link-rfc2396E" href="mailto:users-bounces@shibboleth.netonbehalfofyavor@nyu.edu"><users-bounces@shibboleth.net on behalf of yavor@nyu.edu></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">The seckeygen.sh utility
changes upercase characters in the alias name to lowercase without any warning, if you want to use a custom alias with capital letters.
</pre>
</blockquote>
<pre wrap="">
If anything's doing that, it's probably Java. We're not doing anything but trimming it.</pre>
</blockquote>
<br>
It is Java. From the KeyStore Javadocs:<br>
<br>
<br>
<blockquote cite="mid:5D652755-0825-4EFA-9BCE-2719D8689F58@osu.edu"
type="cite">
<pre wrap="">
<blockquote type="cite"><meta http-equiv="content-type" content="text/html; charset=windows-1252"><p> Whether aliases are case sensitive is implementation dependent. In order
to avoid problems, it is recommended not to use aliases in a KeyStore that
only differ in case.
</p></blockquote>
</pre></blockquote>
I know from personal experience, and confirmed by googling, that Oracle's standard (non-SecretKey) impl (type "JKS" from the SUN provider) is case-insensitive, and always lowercases the alias that you give it. I would assume it's the same for the "JCEKS" type used here for SecretKey support.
*******************
Addendum:
New to me, I did just discover that they purportedly have a different impl (type "CaseExactJKS") that supports case-sensitive aliases. [1] I have not tried it. That probably does not provide the "JCEKS" and SecretKey support needed here though. Maybe they have a corresponding "CaseExactJCEKS" or something, but I think you'd have to consistently configure that type everywhere in the system. I doubt it would be worth the trouble.
[1] <a class="moz-txt-link-freetext" href="https://blogs.oracle.com/xuelei/entry/keystore_alias_case_sensitive_or">https://blogs.oracle.com/xuelei/entry/keystore_alias_case_sensitive_or</a>
</body></html>