[8u] RFR Backport 8177334: Update xmldsig implementation to Apache Santuario 2.1.1

[Severin Gehwolf]

Hi David,

On Tue, 2020-08-18 at 23:23 -0700, David Alvarez wrote:
> Hi,
> 
> First, sorry, I managed to delete some of the list emails from my inbox,
> so I can't respond in the proper thread, but I have copied the original
> subject, I hope that is enough to locate the original thread (which
> spawns a few months)
> 
> I've noticed that 8177334 has landed in openjdk8u272, the update to
> Apache Santuario. When the initial RFR was sent, it was mentioned that
> there were three subsequent bugfixes pending. One of them is still
> missing, JDK-8236645 [1], which is 8u specific and not present in tip,
> so no backport. What is the plan regarding this one? I have seen no
> further comment on the issue (if this has been already discussed, my
> apologies). Are we going to ship openjdk8u272 with this known issue?

We should try to get JDK-8236645 fixed for OpenJDK 8u. Elliott, if not
on your radar already, I think the 8u CSR has enough info to get a
patch going which should fix this. What do you think?
https://bugs.openjdk.java.net/browse/JDK-8237765

Thanks,
Severin

> David
> 
> --
> [1] https://bugs.openjdk.java.net/browse/JDK-8236645
> 
>