[8u] RFR Backport 8177334: Update xmldsig implementation to Apache Santuario 2.1.1

[Elliott Baron]

Hi,

On 2020-08-19 3:41 a.m., Severin Gehwolf wrote:
> Hi David,
> 
> On Tue, 2020-08-18 at 23:23 -0700, David Alvarez wrote:
>> Hi,
>>
>> First, sorry, I managed to delete some of the list emails from my inbox,
>> so I can't respond in the proper thread, but I have copied the original
>> subject, I hope that is enough to locate the original thread (which
>> spawns a few months)
>>
>> I've noticed that 8177334 has landed in openjdk8u272, the update to
>> Apache Santuario. When the initial RFR was sent, it was mentioned that
>> there were three subsequent bugfixes pending. One of them is still
>> missing, JDK-8236645 [1], which is 8u specific and not present in tip,
>> so no backport. What is the plan regarding this one? I have seen no
>> further comment on the issue (if this has been already discussed, my
>> apologies). Are we going to ship openjdk8u272 with this known issue?
> 
> We should try to get JDK-8236645 fixed for OpenJDK 8u. Elliott, if not
> on your radar already, I think the 8u CSR has enough info to get a
> patch going which should fix this. What do you think?
> https://bugs.openjdk.java.net/browse/JDK-8237765
> 
> Thanks,
> Severin
> 
>> David
>>
>> --
>> [1] https://bugs.openjdk.java.net/browse/JDK-8236645
>>

I've completed the work for JDK-8236645 and I'll propose it for review 
today. It's a fairly simple fix, so I anticipate we can get it in soon.

Thanks,
Elliott