[jdk11u-dev] RFR: 8276550: Use SHA256 hash in build.tools.depend.Depend

Aleksey Shipilev shade at openjdk.java.net
Fri Nov 12 07:03:35 UTC 2021


On Wed, 10 Nov 2021 15:35:55 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:

> Clean backport for consistency with other releases. I don't think you can bootstrap 11u with non-MD5-carrying JDK just yet, because MD5 is still a requirement for `MessageDigest`. But, that might change in future, as FIPS compliance requires dropping weaker and weaker hashing schemes.

Got the push approval.

-------------

PR: https://git.openjdk.java.net/jdk11u-dev/pull/611


More information about the jdk-updates-dev mailing list