Java 8u72 / MD5 certificates

[Christopher Bongaarts]

On 1/23/2016 12:03 PM, Cantor, Scott wrote:
> Just an FYI in case anybody else is running SPs dating from the turn of the millennium, if you have any MD5 certs lying around in metadata, Oracle just slipped a rule into the policy file in the latest Java 8 patch that blocks use of MD5 certs for client TLS or trust path processing in Java.

Would this affect the IdP code itself, or is it limited to 
container-based validation?

(i.e. is it relevant if you're fronting your container with Apache?)

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%