mirror of
				https://github.com/f-droid/fdroidserver.git
				synced 2025-11-04 06:30:27 +03:00 
			
		
		
		
	For platforms using Java < 1.8.0_133, MD5 is still enabled for JAR signatures. Its just too painful to manage all this, so support this in the tests.
		
			
				
	
	
		
			22 lines
		
	
	
	
		
			750 B
		
	
	
	
		
			Java
		
	
	
	
	
	
			
		
		
	
	
			22 lines
		
	
	
	
		
			750 B
		
	
	
	
		
			Java
		
	
	
	
	
	
 | 
						|
import java.security.Security;
 | 
						|
import java.util.Locale;
 | 
						|
 | 
						|
public class IsMD5Disabled {
 | 
						|
    public static void main(String[] args) throws Exception {
 | 
						|
        String daString = Security.getProperty("jdk.jar.disabledAlgorithms");
 | 
						|
        String[] algorithms = daString.trim().split(",");
 | 
						|
        boolean isMD5Disabled = true;
 | 
						|
        for (String alg : algorithms) {
 | 
						|
            if (alg.trim().toLowerCase(Locale.US).startsWith("md5")) {
 | 
						|
                isMD5Disabled = false;
 | 
						|
            }
 | 
						|
        }
 | 
						|
        if (isMD5Disabled) {
 | 
						|
            System.out.println("MD5 in jdk.jar.disabledAlgorithms: " + daString);
 | 
						|
        } else {
 | 
						|
            System.out.println("MD5 allowed for JAR signatures: " + daString);
 | 
						|
            System.exit(1);
 | 
						|
        }
 | 
						|
    }
 | 
						|
}
 |