git: openjdk/jdk8u-dev: 8269039: Disable SHA-1 Signed JARs

Alexey Bakhtin abakhtin at openjdk.org
Wed Nov 23 15:19:56 UTC 2022


Changeset: c501bfaa
Author:    Alexey Bakhtin <abakhtin at openjdk.org>
Date:      2022-11-23 15:16:22 +0000
URL:       https://git.openjdk.org/jdk8u-dev/commit/c501bfaa5fc2502942b228c907372dccd58c4a20

8269039: Disable SHA-1 Signed JARs

Reviewed-by: mbalao
Backport-of: 6d91a3eb7bd1e1403cfb67f7eb8ce06d7e08e7a7

! jdk/src/share/classes/sun/security/provider/certpath/AlgorithmChecker.java
! jdk/src/share/classes/sun/security/provider/certpath/CertPathConstraintsParameters.java
! jdk/src/share/classes/sun/security/provider/certpath/PKIX.java
! jdk/src/share/classes/sun/security/provider/certpath/PKIXCertPathValidator.java
! jdk/src/share/classes/sun/security/provider/certpath/SunCertPathBuilder.java
! jdk/src/share/classes/sun/security/tools/jarsigner/Main.java
! jdk/src/share/classes/sun/security/util/DisabledAlgorithmConstraints.java
! jdk/src/share/classes/sun/security/util/JarConstraintsParameters.java
! jdk/src/share/lib/security/java.security-aix
! jdk/src/share/lib/security/java.security-linux
! jdk/src/share/lib/security/java.security-macosx
! jdk/src/share/lib/security/java.security-solaris
! jdk/src/share/lib/security/java.security-windows
- jdk/test/java/security/Security/signedfirst/Dyn.sh
+ jdk/test/java/security/Security/signedfirst/DynStatic.java
- jdk/test/java/security/Security/signedfirst/Static.sh
+ jdk/test/java/security/Security/signedfirst/com/sun/exp/provider/EXP.java
+ jdk/test/java/security/Security/signedfirst/com/sun/exp/provider/SHA.java
- jdk/test/java/security/Security/signedfirst/exp.jar
- jdk/test/java/security/Security/signedfirst/keystore.jks
! jdk/test/java/util/jar/JarFile/Signed.jar
! jdk/test/java/util/jar/JarFile/test.jar
! jdk/test/java/util/jar/JarInputStream/signed.jar
! jdk/test/lib/security/SecurityUtils.java
+ jdk/test/sun/security/tools/jarsigner/OldSig.props
! jdk/test/sun/security/tools/jarsigner/Test4431684.java
! jdk/test/sun/security/tools/jarsigner/TimestampCheck.java
! jdk/test/sun/security/tools/jarsigner/diffend.sh
! jdk/test/sun/security/tools/jarsigner/oldsig.sh



More information about the jdk8u-dev-changes mailing list