jarsigner with JsignJcaProvider failed at timestamp server with OpenJDK 21

[zhutoulala]

I was following https://stackoverflow.com/questions/79591015/signing-a-jar-file-using-jsign-and-kms, and it works fine with JDK 17. After upgrading to OpenJDK 21, here comes the error message:

jarsigner: unable to sign jar: java.lang.RuntimeException: java.io.IOException: Server returned HTTP response code: 500 for URL: http://timestamp.digicert.com/scripts/timstamp.dll

[ebourg]

The timestamping is performed by jarsigner, Jsign handles only the keystore operations. Are you sure the URL is correct? Try http://timestamp.digicert.com/ instead.

This may also be caused by the algorithm used (see https://gist.github.com/Manouchehri/fd754e402d98430243455713efada710?permalink_comment_id=5562989#gistcomment-5562989)

[zhutoulala]

Thanks for the pointer. Yeah, the URL http://timestamp.digicert.com/scripts/timstamp.dll also works. I did notice some changes from the timestamp server. I can close it if it's not Jsign bug