[jdk21u-dev] RFR: 8244336: Restrict algorithms at JCE layer
Paul Hohensee
phh at openjdk.org
Tue Dec 16 17:34:04 UTC 2025
On Mon, 15 Dec 2025 16:32:57 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:
> I backport this for parity with 21.0.11-oracle.
>
> I had to resolve a few files, mostly due to the removal of the
> security manager:
>
> src/java.base/share/classes/java/security/Signature.java
> Adapted patch in getInstance(String) to slightly different coding.
>
> src/java.base/share/classes/sun/security/util/AbstractAlgorithmConstraints.java
> Copyright.
> getAlgorithms(String): Needed to adapt to security coding.
>
> src/java.base/share/classes/sun/security/util/KnownOIDs.java
> Resolved line 188 due to context difference.
>
> Also, I had to adapt one test to work with the SM. See second commit.
Super trivial: in Signature.java, missing blank line before line 254. Also, testing?
-------------
Changes requested by phh (Reviewer).
PR Review: https://git.openjdk.org/jdk21u-dev/pull/2519#pullrequestreview-3584214917
More information about the jdk-updates-dev
mailing list