RFR: 8349732: Add support for JARs signed with ML-DSA [v11]

Weijun Wang weijun at openjdk.org
Wed Nov 5 14:04:19 UTC 2025


On Thu, 30 Oct 2025 18:26:15 GMT, Matthew Donovan <mdonovan at openjdk.org> wrote:

>> Yes, but that means I need to download the ZIP bundles somewhere. This new property allows me to work with local or remote repositories directly. Maybe not many people will use it.
>
> The other option is to set `unpack=true` on the artifact class and then walk the directory returned from `ArtifactResolver.resolve()` to find the files you need. That would require people to have the files on their local machine but makes it easier to run the test.

This is doable but I cannot guarantee there won't be duplicated file names.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/26563#discussion_r2494643561


More information about the security-dev mailing list