JDK-8266298 : Disable SHA-1 Signed JARs
  • Type: Backport
  • Backport of: JDK-8196415
  • Component: security-libs
  • Sub-Component: java.security
  • Priority: P2
  • Status: Closed
  • Resolution: Won't Fix
  • Submitted: 2021-04-29
  • Updated: 2022-01-26
  • Resolved: 2022-01-26
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 17
17Fixed
Comments
No intention to backport it to OpenJDK 11u at this point. See above.
26-01-2022

Closing this bug as "Won't fix". The fix which didn't cause a performance regression, and thus, wasn't backed out was JDK-8269039. That bug hasn't been backported as of today.
26-01-2022

This is an OpenJDK 11u bug. Please don't set the resolved in build field as nothing has been pushed yet.
27-05-2021

Holding off for now due to JDK-8267100 (backout bug) and JDK-8266971 performance issue.
17-05-2021

webrev: https://cr.openjdk.java.net/~sgehwolf/webrevs/JDK-8196415/01/webrev/ RFR: https://mail.openjdk.java.net/pipermail/jdk-updates-dev/2021-May/006105.html
10-05-2021