Building Ant with JDK 8 - ComponentBomTask fails during BOM creation

Jaikiran Pai <[email protected]> Sun, 26 Jul 2026 19:48:06 +0530
Newsgroups gmane.comp.jakarta.ant.devel
Message-ID <[email protected]>
I was trying to investigate some issue with Ant on JDK 8. Against the 
latest master branch I ran "./bootstrap.sh" with JAVA_HOME pointing to 
JDK 8. That runs into the exception I have pasted below. I haven't yet 
looked up the SBOM expectations. Is SHA3-256 mandatory for the SBOMs or 
should we be using a different one when SHA3-256 isn't available?

build.xml:2312: java.lang.IllegalArgumentException: 
java.security.NoSuchAlgorithmException: SHA3-256 MessageDigest not available
     at 
org.apache.commons.codec.digest.DigestUtils.getDigest(DigestUtils.java:156)
     at 
org.apache.commons.codec.digest.DigestUtils.getSha3_256Digest(DigestUtils.java:261)
     at org.cyclonedx.util.BomUtils.getDigestForAlgorithm(BomUtils.java:147)
     at org.cyclonedx.util.BomUtils.calculateHashes(BomUtils.java:98)
     at org.cyclonedx.util.BomUtils.calculateHashes(BomUtils.java:71)
     at org.apache.ant.cyclonedx.Component.addHashes(Component.java:827)
     at 
org.apache.ant.cyclonedx.Component.toCycloneDxComponent(Component.java:666)
     at 
org.apache.ant.cyclonedx.Component.toMainCycloneDxComponent(Component.java:559)
     at 
org.apache.ant.cyclonedx.ToolData.cacheToolInformation(ToolData.java:93)
     at 
org.apache.ant.cyclonedx.ToolData.getToolInformation(ToolData.java:32)
     at 
org.apache.ant.cyclonedx.ComponentBomTask.createMetadata(ComponentBomTask.java:300)
     at 
org.apache.ant.cyclonedx.ComponentBomTask.createBom(ComponentBomTask.java:236)
     at 
org.apache.ant.cyclonedx.ComponentBomTask.execute(ComponentBomTask.java:223)
...
Caused by: java.security.NoSuchAlgorithmException: SHA3-256 
MessageDigest not available
     at sun.security.jca.GetInstance.getInstance(GetInstance.java:159)
     at java.security.Security.getImpl(Security.java:672)
     at java.security.MessageDigest.getInstance(MessageDigest.java:176)
     at 
org.apache.commons.codec.digest.DigestUtils.getMessageDigest(DigestUtils.java:214)
     at 
org.apache.commons.codec.digest.DigestUtils.getDigest(DigestUtils.java:154)
     ... 56 more

-Jaikiran