Withdrawn: 8277474: jarsigner does not check if algorithm parameters are disabled

Hai-May Chao hchao at openjdk.java.net
Tue Feb 22 20:31:50 UTC 2022


On Tue, 22 Feb 2022 20:18:19 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

> This fixes jarsigner to enforce checking against algorithm constraint properties so when the signature algorithms parameters use disabled or legacy algorithms, it will emit warnings accordingly. If the algorithm used in parameters is disabled, jarsigner treats the jar as unsigned.

This pull request has been closed without being integrated.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7580



More information about the security-dev mailing list