RFR: 8349732: Add support for JARs signed with ML-DSA [v4]

Matthew Donovan mdonovan at openjdk.org
Thu Oct 30 16:57:33 UTC 2025


On Thu, 30 Oct 2025 16:34:12 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> Add support for ML-DSA signing of JAR files.
>> 
>> Note: https://datatracker.ietf.org/doc/draft-ietf-lamps-cms-ml-dsa/ is not finalized.
>> 
>> Update: it is published as https://datatracker.ietf.org/doc/rfc9882/.
>
> Weijun Wang has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains five commits:
> 
>  - Merge branch 'master' into 8349732
>  - rfc; test
>  - some rename
>  - Merge branch 'master' into 8349732
>  - the fix

test/lib/jdk/test/lib/security/DataFetcher.java line 78:

> 76:         } else {
> 77:             try {
> 78:                 Path p = ArtifactResolver.resolve(klass).entrySet().stream()

You don't need to introduce a new property. `ArtifactResolver.resolve()` already looks for a System property of the form `jdk.test.lib.artifacts.NAME` (where NAME = the name from the @Artifact class). If the property is specified, its value is returned from `resolve()` unmodified. You can get the URL from there.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/26563#discussion_r2478847521


More information about the security-dev mailing list