ELY-926 added the ability to use PKCS12 as a credential store in elytron. The two commits in it added an alias Data over the OID 1.2.840.113549.1.7.1 that in the current code it is added twice here and here. This alias is wrongly added because it is a legacy alias and the algorithm is added using putService. If an alias want to be added using that method, it should just be passed as the 5th argument aliases.

In previous JDKs the alias was discarded (for example in jdk-11). In general the legacy service is added without a class-name (if the alias is inserted first) and then, when the real service is added, the class-name is assigned to the service. In this case the real service is never added as a legacy one and therefore the original service remains without class-name, and it is discarded by the removeInvalidServices later.

Now in jdk-18 there is a new issue WFCORE-5773 because of the bad alias. The method to remove invalid services has been removed. I think that this is a bug in JDK and it will be resolved sooner or later, but adding the invalid alias makes no sense anyway. The alias is not needed at all, it is working now without it (the credential store uses the OID directly and never the "Data" alias). Therefore the easiest solution is just removing it for now.