[jdk11u-dev] RFR: 8276550: Use SHA256 hash in build.tools.depend.Depend

[Andrew John Hughes]

On Wed, 10 Nov 2021 15:35:55 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:

> Clean backport for consistency with other releases. I don't think you can bootstrap 11u with non-MD5-carrying JDK just yet, because MD5 is still a requirement for `MessageDigest`. But, that might change in future, as FIPS compliance requires dropping weaker and weaker hashing schemes.

Marked as reviewed by andrew (Reviewer).

On the other hand, you can bootstrap JDK 11 with a JDK that has SHA-256 so better to keep things consistent across all supported JDKs.

-------------

PR: https://git.openjdk.java.net/jdk11u-dev/pull/611