[8u] RFR Backport 8177334: Update xmldsig implementation to Apache Santuario 2.1.1

[David Alvarez]

Hi,

First, sorry, I managed to delete some of the list emails from my inbox,
so I can't respond in the proper thread, but I have copied the original
subject, I hope that is enough to locate the original thread (which
spawns a few months)

I've noticed that 8177334 has landed in openjdk8u272, the update to
Apache Santuario. When the initial RFR was sent, it was mentioned that
there were three subsequent bugfixes pending. One of them is still
missing, JDK-8236645 [1], which is 8u specific and not present in tip,
so no backport. What is the plan regarding this one? I have seen no
further comment on the issue (if this has been already discussed, my
apologies). Are we going to ship openjdk8u272 with this known issue?

David

--
[1] https://bugs.openjdk.java.net/browse/JDK-8236645