[8u] RFR Backport 8177334: Update xmldsig implementation to Apache Santuario 2.1.1

[Elliott Baron]

Hi,

On 2020-04-16 7:54 p.m., Elliott Baron wrote:
> Hi,
> 
> I'd like to request a review to backport 8177334 to 8u.
> 
> Original fix:
> https://bugs.openjdk.java.net/browse/JDK-8177334
> http://hg.openjdk.java.net/jdk/jdk/rev/3810c9a2efa1
> 
> The JDK 11 fix did not apply cleanly. Below, I have detailed the 
> modifications I made in order to backport this fix to 8u. There are some 
> major changes that I believe may require some discussion, and many minor 
> changes outlined after those. The changes within each section are listed 
> roughly in order of the patch.
> 
> Thank you to Martin Balao for his assistance in tracking down the 
> dependencies for this fix.
> 
> I should point out that there are some known bugfixes that fix problems 
> introduced by this update. These should probably go into the same 8u 
> update as this fix. They are:
> - 8217878: ENVELOPING XML signature no longer works
> - 8218629: XML Digital Signature throws NAMESPACE_ERR exception on 
> OpenJDK 11, works 8/9/10 (I believe this is the same fix as above)
> - 8236645: JDK 8u231 introduces a regression with incompatible handling 
> of XML messages
> 
> 8u webrev:
> https://cr.openjdk.java.net/~ebaron/jdk8u/JDK-8177334/webrev.00/

Has anyone had a chance to take a look at this yet?

> 
> [snip]

Thanks,
Elliott