On Thu, 5 Nov 2026 14:26:50 GMT, Daniel Jeliński <[email protected]> wrote:
> Remove the check for NSS versions before 3.65. These versions have known > vulnerabilities and are no longer found in any supported operating system > distributions. > > No new failures in tier1 & tier2. FipsModeTLS test fails on NSS 3.129 without > the changes, passes with them. The pkcs11 tests will start failing on NSS > versions prior to 3.65, but no one is expected to use them today. > > --------- > - [x] I confirm that I make this contribution in accordance with the [OpenJDK > Interim AI Policy](https://openjdk.org/legal/ai). This pull request has now been integrated. Changeset: 6cde4b6b Author: Daniel Jeliński <[email protected]> URL: https://git.openjdk.org/jdk/commit/6cde4b6b5f0ef1f462d1063e7fdaa1d27f78d3fe Stats: 29 lines in 2 files changed: 0 ins; 25 del; 4 mod 8396708: SunPKCS11 disables RSA-PSS with NSS 3.128+ due to signed-byte version comparison Reviewed-by: valeriep ------------- PR: https://git.openjdk.org/jdk/pull/33751
