Does JDK 8u72 break OpenSAML certificate parsing in some cases?

[Tom Zeller]

> Java turned off MD5 ...

The only reference I have found for the change in Java 8u65 is :

"MD5 must not be used for digital signatures where collision resistance is required. In orderto prevent the usage of MD5 as digital signature algorithm during X.509 certificate operations, MD5 is added to jdk.certpath.disabledAlgorithms security property. For those applications that still using MD5 signed certificate, please upgrade the weak certificate as soon as possible."

https://www.java.com/en/download/faq/release_changes.xml