-
Bug
-
Resolution: Fixed
-
P3
-
8u231
-
b03
-
b01
A DESCRIPTION OF THE PROBLEM :
The resource file (/com/sun/org/apache/xml/internal/security/resource/config.xml) still contain signature algorithm: "http://www.w3.org/2007/05/xmldsig-more#ripemd160-rsa-MGF1"
==========
<SignatureAlgorithm URI="http://www.w3.org/2007/05/xmldsig-more#ripemd160-rsa-MGF1"
JAVACLASS="com.sun.org.apache.xml.internal.security.algorithms.implementations.SignatureBaseRSA$SignatureRSARIPEMD160MGF1" />
==========
This issue also existed in JDK11.
but the implementation class: "SignatureRSARIPEMD160MGF1" had already removed from "com.sun.org.apache.xml.internal.security.algorithms.implementations.SignatureBaseRSA", it cause the loader print error message.
STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Run the test code.
EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
No Error
ACTUAL -
Oct 09, 2020 4:33:00 PM com.sun.org.slf4j.internal.Logger error
SEVERE: Cannot register URI http://www.w3.org/2007/05/xmldsig-more#ripemd160-rsa-MGF1 to class com.sun.org.apache.xml.internal.security.algorithms.implementations.SignatureBaseRSA$SignatureRSARIPEMD160MGF1 because this class does not exist in CLASSPATH
---------- BEGIN SOURCE ----------
import com.sun.org.apache.xml.internal.security.Init;
import com.sun.org.apache.xml.internal.security.utils.I18n;
import java.util.Locale;
public class Test {
public static void main(String[] args){
System.setProperty("com.sun.org.apache.xml.internal.security.resource.config", "resource/config.xml");
Locale locale = Locale.getDefault();
I18n.init(locale.getLanguage(), locale.getCountry());
Init.init();
}
}
---------- END SOURCE ----------
FREQUENCY : always
The resource file (/com/sun/org/apache/xml/internal/security/resource/config.xml) still contain signature algorithm: "http://www.w3.org/2007/05/xmldsig-more#ripemd160-rsa-MGF1"
==========
<SignatureAlgorithm URI="http://www.w3.org/2007/05/xmldsig-more#ripemd160-rsa-MGF1"
JAVACLASS="com.sun.org.apache.xml.internal.security.algorithms.implementations.SignatureBaseRSA$SignatureRSARIPEMD160MGF1" />
==========
This issue also existed in JDK11.
but the implementation class: "SignatureRSARIPEMD160MGF1" had already removed from "com.sun.org.apache.xml.internal.security.algorithms.implementations.SignatureBaseRSA", it cause the loader print error message.
STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Run the test code.
EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
No Error
ACTUAL -
Oct 09, 2020 4:33:00 PM com.sun.org.slf4j.internal.Logger error
SEVERE: Cannot register URI http://www.w3.org/2007/05/xmldsig-more#ripemd160-rsa-MGF1 to class com.sun.org.apache.xml.internal.security.algorithms.implementations.SignatureBaseRSA$SignatureRSARIPEMD160MGF1 because this class does not exist in CLASSPATH
---------- BEGIN SOURCE ----------
import com.sun.org.apache.xml.internal.security.Init;
import com.sun.org.apache.xml.internal.security.utils.I18n;
import java.util.Locale;
public class Test {
public static void main(String[] args){
System.setProperty("com.sun.org.apache.xml.internal.security.resource.config", "resource/config.xml");
Locale locale = Locale.getDefault();
I18n.init(locale.getLanguage(), locale.getCountry());
Init.init();
}
}
---------- END SOURCE ----------
FREQUENCY : always
- relates to
-
JDK-8275082 Update XML Security for Java to 2.3.0
- Resolved