Hi Joe These two bugs are just approved for 6u21 b05: 6948803 (P2) CertPath validation regression caused by SHA1 replacement root and MD2 disable feature 6948909 (P3) Jarsigner removes MANIFEST.MF info for badly packages jar's Both are regressions of a previous 6uXX release. I hereby request them to be included in openjdk-6. Thanks Max