[jdk8u] RFR: 8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled

Alexey Bakhtin abakhtin at openjdk.org
Thu Dec 1 06:25:30 UTC 2022


On Wed, 30 Nov 2022 15:15:45 GMT, Andrew John Hughes <andrew at openjdk.org> wrote:

>> Backported as a follow-on issue for JDK-8269039
>> 
>> Based on the JDK11u patch
>> I had to resolve some merge issues in a few places:
>> 
>> TimestampCheck.java - simple merge because of no JDK-8171319 in JDK8
>> ManifestEntryVerifier.java - Manually updated because of different arguments of the permits() method
>> DisabledAlgorithmConstraints.java - permits() method manually updated because of no JDK-8285398
>> SignerInfo.java - use explicit type instead of var
>> All corresponding tests passed
>
> Added `jdk8u-critical-yes` for approval.

@gnu-andrew Thank you for the review.
Should I close the [PR](https://github.com/openjdk/jdk8u-dev/pull/197) for the jdk8u-dev repo without committing? 
Or it should be completed as usual with jdk8u-fix-request label?

-------------

PR: https://git.openjdk.org/jdk8u/pull/24


More information about the jdk8u-dev mailing list