Does JDK 8u72 break OpenSAML certificate parsing in some cases?

[Dan Urbano]

I am currently running Shibboleth IdP V 3.1.2 at my company. I don't use
the provided distribution, I build the source code for OpenSAML and the IdP
using ant and my company's homegrown dependency system. I am using the
3.1.1 tag for the OpenSAML source code. Everything works fine when building
with JDK8u66. However, after upgrading to JDK8u72, Opensaml-security-impl
fails 12 unit tests, 2 in PKIXX509CredentialTrustEngineTest and 10 in
CertPathPKIXTrustEvaluatorTest.

According to the list of bug fixes
http://www.oracle.com/technetwork/java/javase/8u72-bugfixes-2775805.html I
noticed one that might be related:
https://bugs.openjdk.java.net/browse/JDK-7194452

Has anyone else experienced this problem and/or can anyone verify that the
bug fix for JDK8u72 linked above screws up how OpenSAML parses
certificates? This is my first time posting to this list, hope this is the
correct place to ask.

Thanks,
Dan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20160203/a7c827e4/attachment.html>