<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Here is the webrev:<div class=""><br class=""></div><div class=""><a href="http://cr.openjdk.java.net/~weijun/8172404/webrev.00/" class="">http://cr.openjdk.java.net/~weijun/8172404/webrev.00/</a></div><div class=""><br class=""></div><div class="">Thanks,</div><div class="">Hai-May</div><div class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Apr 4, 2020, at 11:41 PM, Hai-May Chao <<a href="mailto:hai-may.chao@oracle.com" class="">hai-may.chao@oracle.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><meta http-equiv="Content-Type" content="text/html; charset=utf-8" class=""><div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Hi,</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;"><br class=""></span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">I'd like to request a review for:</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo; min-height: 18px;"><span class="" style="font-variant-ligatures: no-common-ligatures;"></span><br class=""></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">Bug: <a href="https://bugs.openjdk.java.net/browse/JDK-8172404" class="">https://bugs.openjdk.java.net/browse/JDK-8172404</a></span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">CSR: <a href="https://bugs.openjdk.java.net/browse/JDK-8238640" class="">https://bugs.openjdk.java.net/browse/JDK-8238640</a></span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo; min-height: 18px;"><span class="" style="font-variant-ligatures: no-common-ligatures;"></span><br class=""></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;"><span class="" style="font-variant-ligatures: no-common-ligatures;">It’d be useful to start warning users that certain algorithms and key lengths are becoming weak, so that users could begin transition away from them before they are actually disabled. </span><span class="" style="font-variant-ligatures: no-common-ligatures;">A new security property named </span>jdk.security.legacyAlgorithms is added to the java.security file to list the legacy algorithms. The keytool and jarsigner tools are enhanced to enforce the new property and to emit the warning messages when legacy algorithms are used.</div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;"><br class=""></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;">Thanks,</div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal; font-family: Menlo;">Hai-May</div></div></div></blockquote></div><br class=""></div></body></html>