8186032: Disable XML Signatures signed with EC keys less than 224 bits

Reviewed-by: weijun, rhalade
This commit is contained in:
Sean Mullan 2017-12-15 10:42:25 -05:00
parent cf8a91378d
commit 4ea3d766b6

View file

@ -881,6 +881,7 @@ jdk.xml.dsig.secureValidationPolicy=\
disallowReferenceUriSchemes file http https,\ disallowReferenceUriSchemes file http https,\
minKeySize RSA 1024,\ minKeySize RSA 1024,\
minKeySize DSA 1024,\ minKeySize DSA 1024,\
minKeySize EC 224,\
noDuplicateIds,\ noDuplicateIds,\
noRetrievalMethodLoops noRetrievalMethodLoops