On Mon, 14 Sep 2026 15:25:16 GMT, Sean Mullan <[email protected]> wrote:
>> You are right. I meant to say there is no more "SHA1with" part in the >> signature name, so the `-sigalg` option is useless. Also, I think I should >> not mention parameter sets at all, which could only make people confused. >> How about this? >> >> * Modern digital signature algorithms such as EdDSA and ML-DSA use the same >> algorithm as the key, and there is no separately selectable signature >> algorithm >> such as `SHA1withRSA`. Therefore, when using such a key, specifying `-sigalg` >> explicitly is unnecessary. > > Looks better, but maybe it can be more concise? Suggest: > > Modern digital signature algorithms such as EdDSA and ML-DSA use the same > algorithm as the key. When using such a key, specifying `-sigalg` is > unnecessary. Sure. Thanks. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/32616#discussion_r4007555367
