[jdk17u-dev] RFR: 8244336: Restrict algorithms at JCE layer

Goetz Lindenmaier goetz at openjdk.org
Fri Feb 27 17:18:51 UTC 2026


I backport this for parity with 17.0.19-oracle.

The backport is based on the change in 21.
I needed to do some trivial resolves.

src/java.base/share/classes/java/security/KeyStore.java
src/java.base/share/classes/java/security/MessageDigest.java
Resolved javadoc comment.

src/java.base/share/classes/java/security/Signature.java
Resolved javadoc comment and deletion of class CipherAdapter

src/java.base/share/classes/sun/security/util/AbstractAlgorithmConstraints.java
Resolved Copyright.

Further I remove the javadoc changes.
The CSR for head and the backported changes in 25, 21ff differ.
The CSR for the backported changes says that it omits the javadoc
changes.  My backport to 25&21 did not do so, I correct this with
JDK-8378853.  For 17, I remove the comments right in the original
backport, though.
For more details see https://bugs.openjdk.org/browse/JDK-8378853

-------------

Commit messages:
 - undo javadoc changes
 - backport 310a042b4a2e211aad1c5c805ca5ebcc184010e8

Changes: https://git.openjdk.org/jdk17u-dev/pull/4286/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk17u-dev&pr=4286&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8244336
  Stats: 1440 lines in 19 files changed: 1245 ins; 165 del; 30 mod
  Patch: https://git.openjdk.org/jdk17u-dev/pull/4286.diff
  Fetch: git fetch https://git.openjdk.org/jdk17u-dev.git pull/4286/head:pull/4286

PR: https://git.openjdk.org/jdk17u-dev/pull/4286


More information about the jdk-updates-dev mailing list