Integrated: 8277474: jarsigner does not check if algorithm parameters are disabled
Hai-May Chao
hchao at openjdk.java.net
Thu Mar 3 23:05:10 UTC 2022
On Tue, 22 Feb 2022 22:00:05 GMT, Hai-May Chao <hchao at openjdk.org> wrote:
> This fixes jarsigner to enforce checking against algorithm constraint properties so when the signature algorithms parameters use disabled or legacy algorithms, it will emit warnings accordingly. If the algorithm used in parameters is disabled, jarsigner treats the jar as unsigned.
This pull request has now been integrated.
Changeset: fb6b929e
Author: Hai-May Chao <hchao at openjdk.org>
URL: https://git.openjdk.java.net/jdk/commit/fb6b929e6e935baeccfd03a7fbc048cc8b531ce5
Stats: 121 lines in 4 files changed: 112 ins; 1 del; 8 mod
8277474: jarsigner does not check if algorithm parameters are disabled
Reviewed-by: mullan, weijun
-------------
PR: https://git.openjdk.java.net/jdk/pull/7582
More information about the security-dev
mailing list