Re: [eclipse-pmc] Planning Council meeting today - Notice of deprecated

[Lars Vogel <lars.vogel@xxxxxxxxxxx>]

Can we mark it also for deletion?

I think we don't have a PMC call today, iirc we cancelled it every beginning of the month

Thomas Watson <tjwatson@xxxxxxxxxx> schrieb am Mi., 5. Mai 2021, 15:13:

Reminder, Alex and I have the planning Council meeting today during the PMC meeting.  I will not be at the PMC meeting.

 

One topic is the fix to https://bugs.eclipse.org/bugs/show_bug.cgi?id=572034

 

This fix required a new deprecation to the SignerInfo.getMessageDigestAlgorithm method:

https://help.eclipse.org/2021-03/index.jsp?topic=%2Forg.eclipse.platform.doc.isv%2Freference%2Fapi%2Forg%2Feclipse%2Fosgi%2Fsignedcontent%2FSignerInfo.html&anchor=getMessageDigestAlgorithm()

 

Nothing in the Eclipse Platform calls this method and to be honest I do not see how a user would use the information anyway because there is no API to get at the digests of the individual bundle content entries to verify the content yourself with the returned algorithm name.  It seems this method is informational, at best.  Given the urgency of the issue, many TSAs are updating their algorithms to ones the old code does not understand, I think we need to move to deprecate this method in 4.20 now and get this fix in.  With that in mind I went ahead and merged in the fix to use the Java JAR APIs instead of the home grown implementation in Equinox so that our support for signed JARs can move along with what Java itself provides.

Tom
 

_______________________________________________
eclipse-pmc mailing list
eclipse-pmc@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/eclipse-pmc