RFR: 8277474: jarsigner does not check if algorithm parameters are disabled
Hai-May Chao
hchao at openjdk.java.net
Tue Feb 22 22:11:19 UTC 2022
This fixes jarsigner to enforce checking against algorithm constraint properties so when the signature algorithms parameters use disabled or legacy algorithms, it will emit warnings accordingly. If the algorithm used in parameters is disabled, jarsigner treats the jar as unsigned.
-------------
Commit messages:
- 8277474: jarsigner does not check if algorithm parameters are disabled
Changes: https://git.openjdk.java.net/jdk/pull/7582/files
Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=7582&range=00
Issue: https://bugs.openjdk.java.net/browse/JDK-8277474
Stats: 120 lines in 3 files changed: 111 ins; 1 del; 8 mod
Patch: https://git.openjdk.java.net/jdk/pull/7582.diff
Fetch: git fetch https://git.openjdk.java.net/jdk pull/7582/head:pull/7582
PR: https://git.openjdk.java.net/jdk/pull/7582
More information about the security-dev
mailing list