openjdk 8 & 2048 bit DSA xml signing

Sean Mullan sean.mullan at
Tue Dec 1 17:03:22 UTC 2015

I opened a backport for this issue for a JDK 8 update release, see:

The backport should be relatively straightforward, but I am not sure yet 
when or what release the fix will appear in.


On 11/19/2015 04:53 AM, Basabendra Misra wrote:
> Hi,
> It seems there is a fix to support 2048 bit DSA signing in upcoming
> openjdk 9 release. However , could anyone please guide me what would be
> the safest way to incorporate the same in openjdk 8?
> Would really appreciate any help. We're stuck because some CA not
> offering 1024 bit DSA keys anymore.
> Thanks & regards,
> Basabendra Misra
> +91-9830527802

More information about the security-dev mailing list