<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
<div class="moz-cite-prefix">On 1/28/16 3:11 PM, Cantor, Scott
wrote:<br>
</div>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE1128006D3@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite">
<blockquote type="cite">
<pre wrap="">Honestly, if this is going to turn out to be that difficult, I'll restate my original
opinion, which is: given the impending EOL and the fact that we literally won't
be making any more changes to v2 (except possibly for a security bug), it's
probably not worth it to spend a lot of time on this. I would not personally
trouble me if we just kept building it with Java 7, since that's what we've
been doing for the last X years.
</pre>
</blockquote>
<pre wrap="">
Consistency alone sort of suggests we do that.</pre>
</blockquote>
<br>
That's true.<br>
<br>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE1128006D3@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite">
<pre wrap="">
Do you want to just re-enable MD5 for now?
</pre>
</blockquote>
<br>
I think that's an entirely separate issue, but: Yes, I was going to
suggest we do that also. I saw that v3 java-opensaml failed on the
OpenJDK builds also, because of the PKIX stuff. It will take me a
little while to get the test certs fixed up. I also remembered that
there are also test various CRL's involved, issued by the various
root and intermediate CA's, so I really have to go dredge all that
up.<br>
<br>
I just updated these files, are there any others?<br>
<br>
<tt>/opt/jdk1.8.0_72/jre/lib/security/java.security</tt><tt><br>
</tt><tt><br>
</tt><tt>/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.71-2.b15.el7_2.x86_64/jre/lib/security/java.security</tt><tt><br>
</tt><tt><br>
</tt><tt>/usr/lib/jvm/java-1.7.0-openjdk-1.7.0.95-2.6.4.0.el7_2.x86_64/jre/lib/security/java.security</tt><br>
<br>
<br>
</body>
</html>