<html><head></head><body><div>Hello,</div><div><br></div><div>The bug does not explain why. I would understand to completely deny SHA1 (I.e. Unconditionally), but allowing it seems strange, especially without a justification.<br><br><div class="acompli_signature">Gruss<br>Bernd<br>-- <br><a dir="ltr" href="http://bernd.eckenfels.net" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="0">http://bernd.eckenfels.net</a></div><br></div><br><br><br>

<div class="gmail_quote">On Mon, Feb 13, 2017 at 10:57 PM +0100, "Anthony Scarpino" <span dir="ltr"><<a href="mailto:anthony.scarpino@oracle.com" target="_blank">anthony.scarpino@oracle.com</a>></span> wrote:<br>

<br>

<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<div dir="3D"ltr"">

<pre>Hi,

I need a quick review on a simple certpath config change.

http://cr.openjdk.java.net/~ascarpino/8174849/webrev/

thanks

Tony

</pre>

</div>

</blockquote>

</div>

</body></html>