[jdk21u-dev] RFR: 8244336: Restrict algorithms at JCE layer [v2]

[Ralf Schmelter]

On Wed, 17 Dec 2025 08:44:07 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

>> I backport this for parity with 21.0.11-oracle.
>> 
>> I had to resolve a few files, mostly due to the removal of the 
>> security manager:
>> 
>> src/java.base/share/classes/java/security/Signature.java
>> Adapted patch in getInstance(String) to slightly different coding.
>> 
>> src/java.base/share/classes/sun/security/util/AbstractAlgorithmConstraints.java
>> Copyright.
>> getAlgorithms(String): Needed to adapt to security coding.
>> 
>> src/java.base/share/classes/sun/security/util/KnownOIDs.java
>> Resolved line 188 due to context difference.
>> 
>> Also, I had to adapt one test to work with the SM.  See second commit.
>
> Goetz Lindenmaier has updated the pull request incrementally with one additional commit since the last revision:
> 
>   fixe white space

Looks good.

-------------

Marked as reviewed by rschmelter (Reviewer).

PR Review: https://git.openjdk.org/jdk21u-dev/pull/2519#pullrequestreview-3674280823