[jdk11u-dev] RFR: 8344137: Update XML Security for Java to 3.0.5

[Andrew John Hughes]

On Mon, 16 Feb 2026 14:42:55 GMT, Petra Alice Mikova <duke at openjdk.org> wrote:

> I backport this for parity with 11.0.29-oracle from 17
> 
> Mostly clean backport:
> 
> src/java.xml.crypto/share/classes/com/sun/org/apache/xml/internal/security/utils/Constants.java did not apply cleanly for some reason, but no changes made
> test/jdk/javax/xml/crypto/dsig/GenerationTests.java - keeping the changes but disabling the actual tests because of missing JDK-8166597
> test/jdk/javax/xml/crypto/dsig/PSS.java test doesn't apply to the JDK11, as it is missing JDK-8241306 - disabling it for JDK  < 17
> 
> Keeping the file and changes in tests for easier future backport resolving.

This mostly looks good. I think the issue with `Constants.java` is the context with 17u having `_TAG_RSAPSSPARAMS` where 11u doesn't (which may also relate to your issues with `PSS.java`.

I'll have to look at the two problematic tests to see what is going on there.  If it's not something we can ever backport, there is no point having dead code in there, but at the moment, it's not clear to me if support is completely missing or just the variables in the Java spec which we can't backport.  I'll try and get back to you on this tomorrow.

-------------

PR Review: https://git.openjdk.org/jdk11u-dev/pull/3156#pullrequestreview-3817311169