yWorks / yGuard

The open-source Java obfuscation tool working with Ant and Gradle by yWorks - the diagramming experts

Home Page:https://yworks.github.io/yGuard/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Digests for resources in rename task

TimurDaas opened this issue · comments

Hello.
I found out that property digests is ignored while processing resource files(e.g lang.properties) in rename task. It always uses two default hash algorithms: MD5 & SHA. Both of them are deprecated.
In shrink task - it works good. Property is not ignored.
It is not correct because OpenJDK(I tried in Linux) while checking JAR signature also checks MANIFEST.MF file and detects week hashing algorithm. In Java disabled algorithms are setted in property jdk.jar.disabledAlgorithms in java.security file.

If I`m not correct, please, explain me why...

You are right, the digests property is currently ignored for resource files. Unfortunately, there is no workaround for this problem.

I can create pull request with fix, if you need my help?

Fixed. Changes will be able in future releases

Fixed. Changes will be able in future releases

Hi. When will new release be available? Thanks