On Wed, 28 Oct 2020 21:01:44 GMT, Weijun Wang <wei...@openjdk.org> wrote:
> This is a regression made by > [JDK-8242068](https://bugs.openjdk.java.net/browse/JDK-8242068). When the > digest algorithm is not the same as the hash part of the signature algorithm, > we used to combine the digest algorithm with the key part of the signature > algorithm into a new signature algorithm and use it when generating a > signature. The previous code change uses the signature algorithm in the > SignerInfo directly. This bugfix will revert to the old behavior. Looks good! ------------- PR: https://git.openjdk.java.net/jdk/pull/916