[jdk21u-dev] RFR: 8244336: Restrict algorithms at JCE layer

Paul Hohensee phh at openjdk.org
Tue Dec 16 17:34:04 UTC 2025


On Mon, 15 Dec 2025 16:32:57 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

> I backport this for parity with 21.0.11-oracle.
> 
> I had to resolve a few files, mostly due to the removal of the 
> security manager:
> 
> src/java.base/share/classes/java/security/Signature.java
> Adapted patch in getInstance(String) to slightly different coding.
> 
> src/java.base/share/classes/sun/security/util/AbstractAlgorithmConstraints.java
> Copyright.
> getAlgorithms(String): Needed to adapt to security coding.
> 
> src/java.base/share/classes/sun/security/util/KnownOIDs.java
> Resolved line 188 due to context difference.
> 
> Also, I had to adapt one test to work with the SM.  See second commit.

Super trivial: in Signature.java, missing blank line before line 254. Also, testing?

-------------

Changes requested by phh (Reviewer).

PR Review: https://git.openjdk.org/jdk21u-dev/pull/2519#pullrequestreview-3584214917


More information about the jdk-updates-dev mailing list