Details
-
Type:
Enhancement
-
Status: Closed
-
Priority:
P2
-
Resolution: Fixed
-
Affects Version/s: 6u141
-
Fix Version/s: 6u161
-
Component/s: security-libs
-
Subcomponent:
-
Resolved In Build:b08
-
Verification:Verified
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8188341 | 6u181 | Unassigned | P2 | Resolved | Fixed | b01 |
JDK-8178369 | 6u171 | Sean Coffey | P2 | Resolved | Fixed | b01 |
Description
The default digest algorithm for the -tsadigestalg option if not specified is SHA-1. It should be upgraded to SHA-256. This only affects JDK 6. The default for JDK 7 and up is SHA-256.
Attachments
Issue Links
- backported by
-
JDK-8178369 Change JDK 6 jarsigner -tsadigestalg default to SHA-256
-
- Resolved
-
-
JDK-8188341 Change JDK 6 jarsigner -tsadigestalg default to SHA-256
-
- Resolved
-
- relates to
-
JDK-8179614 Test for jarsigner on verifying jars that are signed and timestamped by other JDK releases
-
- Resolved
-
-
JDK-8145853 Add support to jarsigner for specifying timestamp hash algorithm
-
- Resolved
-