[eclipse-pmc] Planning Council meeting today - Notice of deprecated meth

["Thomas Watson" <tjwatson@xxxxxxxxxx>]

Reminder, Alex and I have the planning Council meeting today during the PMC meeting.  I will not be at the PMC meeting.

 

One topic is the fix to https://bugs.eclipse.org/bugs/show_bug.cgi?id=572034

 

This fix required a new deprecation to the SignerInfo.getMessageDigestAlgorithm method:

https://help.eclipse.org/2021-03/index.jsp?topic=%2Forg.eclipse.platform.doc.isv%2Freference%2Fapi%2Forg%2Feclipse%2Fosgi%2Fsignedcontent%2FSignerInfo.html&anchor=getMessageDigestAlgorithm()

 

Nothing in the Eclipse Platform calls this method and to be honest I do not see how a user would use the information anyway because there is no API to get at the digests of the individual bundle content entries to verify the content yourself with the returned algorithm name.  It seems this method is informational, at best.  Given the urgency of the issue, many TSAs are updating their algorithms to ones the old code does not understand, I think we need to move to deprecate this method in 4.20 now and get this fix in.  With that in mind I went ahead and merged in the fix to use the Java JAR APIs instead of the home grown implementation in Equinox so that our support for signed JARs can move along with what Java itself provides.

Tom