[jdk11u-dev] RFR: 8263188: JSSE should fail fast if there isn't supported signature algorithm [v3]
Antonio Vieiro
avieiro at openjdk.org
Fri Dec 5 08:23:47 UTC 2025
> Clean backport of [JDK-8263188](https://bugs.openjdk.org/browse/JDK-8263188) to JDK11.
>
> It will make it easier to backport and review [JDK-8349583](https://bugs.openjdk.org/browse/JDK-8349583) and [JDK-8340321](https://bugs.openjdk.org/browse/JDK-8340321) , so OpenJDK 11 [follows the Oracle JRE and JDK Cryptographic Roadmap on 2026/01](https://www.java.com/en/jre-jdk-cryptoroadmap.html) by disabling SHA-1 in TLS/DTLS 1.2 handshake signatures.
>
> Since JDK11 does not sport the `ByteBuffer.slice(int, int)` method in JDK17 (used in `test/jdk/sun/security/ssl/SignatureScheme/SigAlgosExtTestWithTLS12.java`), a second commit adds an equivalent and updates the test.
>
> Tested on Linux with `tier1` tests:
>
>
> ==============================
> Test summary
> ==============================
> TEST TOTAL PASS FAIL ERROR
> jtreg:test/hotspot/jtreg:tier1 1497 1497 0 0
> jtreg:test/jdk:tier1 1899 1899 0 0
> jtreg:test/langtools:tier1 3941 3941 0 0
> jtreg:test/nashorn:tier1 0 0 0 0
> jtreg:test/jaxp:tier1 0 0 0 0
> ==============================
> TEST SUCCESS
>
>
> Also security tests (including new ones) pass:
>
>
> ==============================
> Test summary
> ==============================
> TEST TOTAL PASS FAIL ERROR
> jtreg:test/jdk/sun/security 664 664 0 0
> ==============================
> TEST SUCCESS
Antonio Vieiro has updated the pull request incrementally with one additional commit since the last revision:
8364597: Replace THL A29 Limited with Tencent
-------------
Changes:
- all: https://git.openjdk.org/jdk11u-dev/pull/3126/files
- new: https://git.openjdk.org/jdk11u-dev/pull/3126/files/b17720dd..fbad3f56
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3126&range=02
- incr: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3126&range=01-02
Stats: 2 lines in 2 files changed: 0 ins; 0 del; 2 mod
Patch: https://git.openjdk.org/jdk11u-dev/pull/3126.diff
Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/3126/head:pull/3126
PR: https://git.openjdk.org/jdk11u-dev/pull/3126
More information about the jdk-updates-dev
mailing list