Re: Tomcat 9.0.58 and OpenJDK 1.8.0_322

2022-02-17 Thread Robert Hicks
We think our java.security file is borked somehow. So going down that road at the moment. -- Bob On Thu, Feb 17, 2022 at 12:49 PM Thad Humphries wrote: > What is your use for SHA-1? Are you using it in your own code, like > `MessageDigest.getInstance("SHA-1")` or do you have signed JARs? Or

Re: Tomcat 9.0.58 and OpenJDK 1.8.0_322

2022-02-17 Thread Thad Humphries
What is your use for SHA-1? Are you using it in your own code, like `MessageDigest.getInstance("SHA-1")` or do you have signed JARs? Or maybe certificates that use SHA-1? (though I don't think those have been a thing for quite some time) java.security.MessageDigest for Java 8 supposed to support

Re: Tomcat 9.0.58 and OpenJDK 1.8.0_322

2022-02-16 Thread Noelette Stout
Based on those errors, it sounds like SHA-1 has been desupported in the newer OpenJDK version. On Wed, Feb 16, 2022 at 1:55 PM Robert Hicks wrote: > We are currently running Tomcat 9.0.40 and OpenJDK (Red Hat) 1.8.0_292 and > have no issues. > > We upgrade to the ones in the subject line and

Tomcat 9.0.58 and OpenJDK 1.8.0_322

2022-02-16 Thread Robert Hicks
We are currently running Tomcat 9.0.40 and OpenJDK (Red Hat) 1.8.0_292 and have no issues. We upgrade to the ones in the subject line and Tomcat throws "SHA1PRNG SecureRandom not available" and "SHA MessageDigest not available" and "SHA-1 not available" and others. We downgrade to .40 and _292