Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8321532

Update XML Security for Java to 3.0.3

    XMLWordPrintable

Details

    • source
    • minimal
    • Other
    • Implementation

    Description

      Summary

      Update the XML Signature implementation (primarily in the com/sun/org/apache/xml/internal/ classes) in the JDK to version 3.0.3 of Apache Santuario. This is a CSR request for the 21u/17u/11u/8u JDK releases..

      4 new SHA-3 based XML signature methods were defined in this Santuario release. Unlike the JDK 22 fix, the JDK update releases won't define those signature methods in the javax.xml.crypto.dsig.SignatureMethod class but the underlying implementation code will be integrated for use via the XML signature implementation. User can directly use the names of these signature methods since they are just string literals.

      Problem

      Apache Santuario 3.0.3 introduced support for 4 new signature methods. We should support them.

      Solution

      Import Apache Santuario 3.0.3. For the update releases, the new algorithm URIs won't be defined in public spec.

      Specification

      N/A Implementation changes. A release note will be added to indicate support of Santuario 3.0.3

      Attachments

        Issue Links

          Activity

            People

              coffeys Sean Coffey
              weijun Weijun Wang
              Weijun Wang
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: