[8u] RFR Backport 8177334: Update xmldsig implementation to Apache Santuario 2.1.1

[Elliott Baron]

Hi,

On 2020-05-08 2:58 p.m., Elliott Baron wrote:
> Hi,
> 
> On 2020-04-16 7:54 p.m., Elliott Baron wrote:
>> Hi,
>>
>> I'd like to request a review to backport 8177334 to 8u.
>>
>> Original fix:
>> https://bugs.openjdk.java.net/browse/JDK-8177334
>> http://hg.openjdk.java.net/jdk/jdk/rev/3810c9a2efa1
>>
>> The JDK 11 fix did not apply cleanly. Below, I have detailed the 
>> modifications I made in order to backport this fix to 8u. There are 
>> some major changes that I believe may require some discussion, and 
>> many minor changes outlined after those. The changes within each 
>> section are listed roughly in order of the patch.
>>
>> Thank you to Martin Balao for his assistance in tracking down the 
>> dependencies for this fix.
>>
>> I should point out that there are some known bugfixes that fix 
>> problems introduced by this update. These should probably go into the 
>> same 8u update as this fix. They are:
>> - 8217878: ENVELOPING XML signature no longer works
>> - 8218629: XML Digital Signature throws NAMESPACE_ERR exception on 
>> OpenJDK 11, works 8/9/10 (I believe this is the same fix as above)
>> - 8236645: JDK 8u231 introduces a regression with incompatible 
>> handling of XML messages
>>
>> 8u webrev:
>> https://cr.openjdk.java.net/~ebaron/jdk8u/JDK-8177334/webrev.00/
> 
> Has anyone had a chance to take a look at this yet?
> 
>>
>> [snip]

Here is an updated webrev that fixes conflicts introduced by
8231415: Better signatures in XML.

8u webrev:
https://cr.openjdk.java.net/~ebaron/jdk8u/JDK-8177334/webrev.01/

Thanks,
Elliott