RFR: 8277474: jarsigner does not check if algorithm parameters are disabled [v6]

Weijun Wang weijun at openjdk.java.net
Thu Mar 3 22:58:02 UTC 2022


On Thu, 3 Mar 2022 22:18:53 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

>> This fixes jarsigner to enforce checking against algorithm constraint properties so when the signature algorithms parameters use disabled or legacy algorithms, it will emit warnings accordingly. If the algorithm used in parameters is disabled, jarsigner treats the jar as unsigned.
>
> Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision:
> 
>   No need to do toUpperCase

Marked as reviewed by weijun (Reviewer).

-------------

PR: https://git.openjdk.java.net/jdk/pull/7582



More information about the security-dev mailing list