RFR: 8259401: Add checking to jarsigner to warn weak algorithms used in si…

Hai-May Chao hchao at openjdk.java.net
Tue Jan 12 03:39:22 UTC 2021


The jarsigner tool currently provides warning associated with the signer’s cert when it uses weak algorithms, but not for the CA certs. This change is to process the signer’s cert chain to warn if CA certs use weak algorithms.

-------------

Commit messages:
 - 8259401: Add checking to jarsigner to warn weak algorithms used in signer’s cert chain

Changes: https://git.openjdk.java.net/jdk/pull/2042/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=2042&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8259401
  Stats: 125 lines in 2 files changed: 124 ins; 0 del; 1 mod
  Patch: https://git.openjdk.java.net/jdk/pull/2042.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/2042/head:pull/2042

PR: https://git.openjdk.java.net/jdk/pull/2042



More information about the security-dev mailing list