RFR: 8353738: Update TLS unit tests to not use certificates with MD5 signatures [v3]

Artur Barashev abarashev at openjdk.org
Thu Oct 30 21:59:07 UTC 2025


On Wed, 29 Oct 2025 11:57:45 GMT, Matthew Donovan <mdonovan at openjdk.org> wrote:

>> This PR updates tests that were using MD5 certificates. For most of the tests, I added test cases for TLSv1.2/MD5withRSA and TLSv1.3/SHA256withRSA.
>
> Matthew Donovan has updated the pull request incrementally with one additional commit since the last revision:
> 
>   changed tests to use SecurityUtils.removeDisabled*Algs methods

test/jdk/javax/net/ssl/HttpsURLConnection/CriticalSubjectAltName.java line 221:

> 219:         if (args[1].contains("MD5")) {
> 220:             // MD5 is used in this test case, don't disable MD5 algorithm.
> 221:             SecurityUtils.removeFromDisabledAlgs("jdk.certpath.disabledAlgorithms",

Line length > 80. Also, I think `If MD5 is used ..` comment would be better because we don't always use MD5. Here and in other tests.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27342#discussion_r2479623980


More information about the net-dev mailing list