RFR: 8340321: Disable SHA-1 in TLS/DTLS 1.2 signatures

Matthew Donovan mdonovan at openjdk.org
Wed Apr 2 13:02:54 UTC 2025


On Tue, 1 Apr 2025 20:53:01 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

> Disable SHA-1 in TLS/DTLS 1.2 handshake signatures (but not in certificate signatures).
> https://www.rfc-editor.org/rfc/rfc9155.html

test/jdk/sun/security/ssl/SignatureScheme/DisableSHA1inHandshakeSignatureDTLS12.java line 34:

> 32:  */
> 33: 
> 34: import java.lang.Override;

You shouldn't have to import java.lang.Override

test/jdk/sun/security/ssl/SignatureScheme/DisableSHA1inHandshakeSignatureTLS12.java line 37:

> 35: import static jdk.test.lib.Asserts.assertTrue;
> 36: 
> 37: import java.lang.Override;

unnecessary import

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24367#discussion_r2024764557
PR Review Comment: https://git.openjdk.org/jdk/pull/24367#discussion_r2024766076


More information about the security-dev mailing list