RFR: 8340321: Disable SHA-1 in TLS/DTLS 1.2 signatures

Artur Barashev abarashev at openjdk.org
Tue Apr 1 20:59:06 UTC 2025


Disable SHA-1 in TLS/DTLS 1.2 handshake signatures (but not in certificate signatures).
https://www.rfc-editor.org/rfc/rfc9155.html

-------------

Commit messages:
 - Unit tests
 - Merge branch 'master' into JDK-8340321_disable
 - 8340321: Disable SHA-1 in TLS/DTLS 1.2 signatures

Changes: https://git.openjdk.org/jdk/pull/24367/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=24367&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8340321
  Stats: 176 lines in 3 files changed: 175 ins; 0 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/24367.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/24367/head:pull/24367

PR: https://git.openjdk.org/jdk/pull/24367


More information about the security-dev mailing list