JDK-8259709 : Disable SHA-1 XML Signatures
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.xml.crypto
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2021-01-13
  • Updated: 2022-05-19
  • Resolved: 2021-03-04
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 17
17 b13Fixed
Related Reports
CSR :  
JDK-8261246 - Disable SHA-1 XML Signatures
Relates :  
JDK-8259801 - Enable XML Signature secure validation mode by default
Sub Tasks
JDK-8261364 :  
Release Note: Disable SHA-1 XML Signatures - Closed
Description
Disable XML Signatures that use SHA-1 based digest or signature algorithms. SHA-1 is no longer a recommended digest algorithm.
Comments
Changeset: a6427c85 Author: Sean Mullan <mullan@openjdk.org> Date: 2021-03-04 17:21:37 +0000 URL: https://git.openjdk.java.net/jdk/commit/a6427c85
04-03-2021