JDK-8248745 : Add jarsigner and keytool tests for restricted algorithms
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: java.security
  • Affected Version: 16
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: generic
  • CPU: generic
  • Submitted: 2020-07-03
  • Updated: 2022-06-27
  • Resolved: 2020-08-09
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 15 JDK 16 JDK 7 JDK 8
11.0.10-oracleFixed 15.0.1Fixed 16 b11Fixed 7u281Fixed 8u271Fixed
Related Reports
Relates :  
JDK-8233228 - Disable weak named curves by default in TLS, CertPath, and Signed JAR
Description
Add a test for key generation, jar signing and verification with all disabled algorithms and key sizes in the property jdk.jar.disabledAlgorithms.
Cover the scenario of with and without these entries in jdk.jar.disabledAlgorithms.

Whenever the entries are in the property jdk.jar.disabledAlgorithms, corresponding warning or error message should shown, otherwise everything should work fine without any related error or warning.
Comments
Fix Request (11u) I'll continue this from Matthias. It is for 11.0.9-oracle parity, but will go to 11.0.10. Simple test adaption: http://mail.openjdk.java.net/pipermail/jdk-updates-dev/2020-October/003974.html
19-10-2020
jdk11 backport request I would like to have the patch in openjdk11 as well, for better parity with 11.0.9-oracle. The patch applies cleanly, however it currently fails as it is on jdk11, looks like the list of tested sigals/digests etc. needs to be reduced or adjusted for jdk11 (line 80-103 of test/jdk/sun/security/tools/jarsigner/RestrictedAlgo.java https://hg.openjdk.java.net/jdk/jdk/rev/7cf5207e2d6a ), RFR to follow .
12-08-2020
Fix Request (15u/15.0.1) Test only fix required for improving test coverage for JDK-8233228. No risk to product.
11-08-2020
URL: https://hg.openjdk.java.net/jdk/jdk/rev/7cf5207e2d6a User: akolarkunnu Date: 2020-08-09 03:30:13 +0000
09-08-2020