Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8269039

Disable SHA-1 Signed JARs

    XMLWordPrintable

Details

    Backports

      Description

        Disable JARs signed with algorithms using SHA-1 by default, and treat them as unsigned. See the CSR for more details.

        The original enhancement (JDK-8196415) was backed out due to performance regressions, which should be addressed in this new fix.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8282338 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8288965 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8291676 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8292568 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8292705 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8297517 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8292537 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Closed
            csr for

            CSR - null JDK-8272155 Disable SHA-1 Signed JARs

            • P3 - Major loss of function.
            • Closed
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-8265086 jarsigner tool should display descriptive message when multiple constraints are specified

            • P3 - Major loss of function.
            • Closed

            Enhancement - null JDK-8166764 jarsigner should detect JARs that are signed after the SHA-1 cutoff date and warn about it

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8275887 jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8298108 Add a regression test for JDK-8297684

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8274536 sun/security/tools/jarsigner/multiRelease/MVJarSigningTest.java fails due to recursive initialisation

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8266971 JDK-8196415 cause significant startup regressions on apps that include any SHA-1 signed JAR

            • P3 - Major loss of function.
            • Resolved

            Bug - A problem which impairs or prevents the functions of the product. JDK-8262762 Deadlock in java.util.jar.JarFile

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8280890 Cannot use '-Djava.system.class.loader' with class loader in signed JAR

            • P3 - Major loss of function.
            • Closed

            Bug - A problem which impairs or prevents the functions of the product. JDK-8297684 NullPointerException in JarVerifier prevents JVM from starting

            • P3 - Major loss of function.
            • Closed

            Enhancement - null JDK-8196415 Disable SHA-1 Signed JARs

            • P2 - Crashes, loss of data, severe memory leak.
            • Resolved
            links to

            Commit Commit openjdk/jdk8u-dev/c501bfaa

            Commit Commit openjdk/jdk11u-dev/5a0824ba

            Commit Commit openjdk/jdk13u-dev/79497f63

            Commit Commit openjdk/jdk15u-dev/0ec5a527

            Commit Commit openjdk/jdk17u-dev/13055166

            Commit Commit openjdk/jdk/6d91a3eb

            Review Review openjdk/jdk8u-dev/154

            Review Review openjdk/jdk11u-dev/1244

            Review Review openjdk/jdk13u-dev/389

            Review Review openjdk/jdk15u-dev/255

            Review Review openjdk/jdk17u-dev/510

            Review Review openjdk/jdk/5320

            Activity

              People

                mullan Sean Mullan
                mullan Sean Mullan
                Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: