Details
-
Bug
-
Resolution: Fixed
-
P3
-
None
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8243561 | 11.0.9-oracle | Raymond Gallardo | P3 | Resolved | Fixed | |
JDK-8244671 | 8u271 | Raymond Gallardo | P3 | Resolved | Fixed | b01 |
JDK-8243560 | 8u261 | Raymond Gallardo | P3 | Resolved | Fixed | b08 |
JDK-8251825 | emb-8u271 | Raymond Gallardo | P3 | Resolved | Fixed | team |
JDK-8248778 | emb-8u261 | Raymond Gallardo | P3 | Resolved | Fixed | team |
Description
"For signature generation, if the security strength of the digest algorithm is weaker than the security strength of the key used to sign the signature (e.g. using (2048, 256)-bit DSA keys with SHA1withDSA signature), the operation will fail with the error message: "The security strength of SHA1 digest algorithm is not sufficient for this key size."
See https://www.oracle.com/technetwork/java/javase/8u91-relnotes-2949462.html
Attachments
Issue Links
- backported by
-
JDK-8243560 JDK Provider Guide should document that DSA signature generation is now subject to a key strength check
-
- Resolved
-
-
JDK-8243561 JDK Provider Guide should document that DSA signature generation is now subject to a key strength check
-
- Resolved
-
-
JDK-8244671 JDK Provider Guide should document that DSA signature generation is now subject to a key strength check
-
- Resolved
-
-
JDK-8248778 JDK Provider Guide should document that DSA signature generation is now subject to a key strength check
-
- Resolved
-
-
JDK-8251825 JDK Provider Guide should document that DSA signature generation is now subject to a key strength check
-
- Resolved
-
- relates to
-
JDK-8136759 Regression in Applet startup time with Internet Explorer on 8u60 and 8u65-b14
-
- Closed
-
-
JDK-8242928 Weak DHE_DSS cipher suites cannot work with pre-TLSv1.2 protocols
-
- Closed
-