Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
[eclipse-pmc] Planning Council meeting today - Notice of deprecated method for 4.20

Reminder, Alex and I have the planning Council meeting today during the PMC meeting.  I will not be at the PMC meeting.
 
One topic is the fix to https://bugs.eclipse.org/bugs/show_bug.cgi?id=572034
 
This fix required a new deprecation to the SignerInfo.getMessageDigestAlgorithm method:

https://help.eclipse.org/2021-03/index.jsp?topic=%2Forg.eclipse.platform.doc.isv%2Freference%2Fapi%2Forg%2Feclipse%2Fosgi%2Fsignedcontent%2FSignerInfo.html&anchor=getMessageDigestAlgorithm()
 
Nothing in the Eclipse Platform calls this method and to be honest I do not see how a user would use the information anyway because there is no API to get at the digests of the individual bundle content entries to verify the content yourself with the returned algorithm name.  It seems this method is informational, at best.  Given the urgency of the issue, many TSAs are updating their algorithms to ones the old code does not understand, I think we need to move to deprecate this method in 4.20 now and get this fix in.  With that in mind I went ahead and merged in the fix to use the Java JAR APIs instead of the home grown implementation in Equinox so that our support for signed JARs can move along with what Java itself provides.

Tom
 


Back to the top