AW: [11u] RFR: 8196415: Disable SHA-1 Signed JARs

[Doerr, Martin]

Hi Severin,

thanks for backporting it! We should have the same security changes as 11.0.12-oracle. Looks good.

Best regards,
Martin


Von: jdk-updates-dev <jdk-updates-dev-retn at openjdk.java.net> im Auftrag von Severin Gehwolf <sgehwolf at redhat.com>
Datum: Montag, 10. Mai 2021 um 18:23
An: jdk-updates-dev <jdk-updates-dev at openjdk.java.net>
Betreff: [11u] RFR: 8196415: Disable SHA-1 Signed JARs
Hi,

Could I please get a review of this tiny OpenJDK 11 backport for Oracle
JDK 11 parity? The JDK 17 patch didn't apply cleanly since JDK-8235710
isn't in JDK 11 with no plan to backport it. I've manually applied the
patch.

Bug: https://bugs.openjdk.java.net/browse/JDK-8196415
CSR (includes JDK 11): https://bugs.openjdk.java.net/browse/JDK-8264362
webrev: https://cr.openjdk.java.net/~sgehwolf/webrevs/JDK-8196415/01/webrev/

Thoughts?

Thanks,
Severin