[jdk17u-dev] RFR: 8244336: Restrict algorithms at JCE layer [v2]

Goetz Lindenmaier goetz at openjdk.org
Sat Feb 28 14:28:30 UTC 2026


On Sat, 28 Feb 2026 07:22:32 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

>> I backport this for parity with 17.0.19-oracle.
>> 
>> The backport is based on the change in 21.
>> I needed to do some trivial resolves.
>> 
>> src/java.base/share/classes/java/security/KeyStore.java
>> src/java.base/share/classes/java/security/MessageDigest.java
>> Resolved javadoc comment.
>> 
>> src/java.base/share/classes/java/security/Signature.java
>> Resolved javadoc comment and deletion of class CipherAdapter
>> 
>> src/java.base/share/classes/sun/security/util/AbstractAlgorithmConstraints.java
>> Resolved Copyright.
>> 
>> Further I remove the javadoc changes.
>> The CSR for head and the backported changes in 25, 21ff differ.
>> The CSR for the backported changes says that it omits the javadoc
>> changes.  My backport to 25&21 did not do so, I correct this with
>> JDK-8378853.  For 17, I remove the comments right in the original
>> backport, though.
>> For more details see https://bugs.openjdk.org/browse/JDK-8378853
>
> Goetz Lindenmaier has refreshed the contents of this pull request, and previous commits have been removed. The incremental views will show differences compared to the previous content of the PR. The pull request contains one new commit since the last revision:
> 
>   undo javadoc changes

Both windows show the same make problem:

gawk: cmd. line:1: error: ? * + or {interval} not preceded by valid subpattern: /??_7.*@@6B@/
make[3]: *** [lib/JvmMapfile.gmk:116: /d/a/jdk17u-dev/jdk17u-dev/build/windows-x64/hotspot/variant-server/libjvm/symbols-objects] Error 1
make[3]: *** Deleting file '/d/a/jdk17u-dev/jdk17u-dev/build/windows-x64/hotspot/variant-server/libjvm/symbols-objects'

Which I see also with the underlying change.
Strange, I can't see how the changes can cause this error.
Is this a problem of the windows/cygwin gawk?

-------------

PR Comment: https://git.openjdk.org/jdk17u-dev/pull/4286#issuecomment-3977236471


More information about the jdk-updates-dev mailing list