RFR[15] 8245151: jarsigner should not raise duplicate warnings on verification

Weijun Wang weijun.wang at oracle.com
Tue May 19 02:40:17 UTC 2020


Looks fine to me.

Thanks,
Max


> On May 19, 2020, at 4:05 AM, Hai-May Chao <hai-may.chao at oracle.com> wrote:
> 
> Hi,
> 
> I’d like to request a review for -
> 
> JBS: https://bugs.openjdk.java.net/browse/JDK-8245151
> Webrev: https://cr.openjdk.java.net/~hchao/8245151/webrev.00/
> 
> The change is to provide a distinct warning for jarsigner -verify command when it detects weak timestamp digest algorithms are used (by -tsadigestalg when signing).
> 
> Thanks,
> Hai-May
> 




More information about the security-dev mailing list