RFR: 8277474: jarsigner does not check if algorithm parameters are disabled

Hai-May Chao hchao at openjdk.java.net
Tue Feb 22 22:11:19 UTC 2022


This fixes jarsigner to enforce checking against algorithm constraint properties so when the signature algorithms parameters use disabled or legacy algorithms, it will emit warnings accordingly. If the algorithm used in parameters is disabled, jarsigner treats the jar as unsigned.

-------------

Commit messages:
 - 8277474: jarsigner does not check if algorithm parameters are disabled

Changes: https://git.openjdk.java.net/jdk/pull/7582/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=7582&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8277474
  Stats: 120 lines in 3 files changed: 111 ins; 1 del; 8 mod
  Patch: https://git.openjdk.java.net/jdk/pull/7582.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/7582/head:pull/7582

PR: https://git.openjdk.java.net/jdk/pull/7582



More information about the security-dev mailing list