[jdk17u-dev] RFR: 8269039: Disable SHA-1 Signed JARs

[Goetz Lindenmaier]

I backport this for parity with 17.0.5-oracle.

Almost clean except for the chunk of test/.../SecurityUtils.java that was already backported in 
8278851: Correct signer logic for jars signed with multiple digestalgs

-------------

Commit messages:
 - Backport 6d91a3eb7bd1e1403cfb67f7eb8ce06d7e08e7a7

Changes: https://git.openjdk.org/jdk17u-dev/pull/510/files
 Webrev: https://webrevs.openjdk.org/?repo=jdk17u-dev&pr=510&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8269039
  Stats: 657 lines in 21 files changed: 307 ins; 214 del; 136 mod
  Patch: https://git.openjdk.org/jdk17u-dev/pull/510.diff
  Fetch: git fetch https://git.openjdk.org/jdk17u-dev pull/510/head:pull/510

PR: https://git.openjdk.org/jdk17u-dev/pull/510