JDK-8255536 : Remove the directsign property and option
  • Type: Bug
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2020-10-28
  • Updated: 2020-11-09
  • Resolved: 2020-10-30
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 16
16 b23Fixed
Related Reports
CSR :  
JDK-8255551 - Remove the directsign property and option
Relates :  
JDK-8242068 - Signed JAR support for RSASSA-PSS and EdDSA
Description
JDK-8242068 introduced a directsign property and option that can control whether to use signedAttrs when generating a PKCS #7 block. The option is not necessary because RFC 8933 recommends the signedAttrs should always be generated for security reasons.
Comments
The release note at https://bugs.openjdk.java.net/browse/JDK-8255132 is also modified to remove the property/option.
30-10-2020
Changeset: a7563207 Author: Weijun Wang <weijun@openjdk.org> Date: 2020-10-30 13:29:41 +0000 URL: https://github.com/openjdk/jdk/commit/a7563207
30-10-2020