Building Ant with JDK 8 - ComponentBomTask fails during BOM creation
Jaikiran Pai <[email protected]> Sun, 26 Jul 2026 19:48:06 +0530
| Newsgroups | gmane.comp.jakarta.ant.devel |
|---|---|
| Message-ID | <[email protected]> |
I was trying to investigate some issue with Ant on JDK 8. Against the latest master branch I ran "./bootstrap.sh" with JAVA_HOME pointing to JDK 8. That runs into the exception I have pasted below. I haven't yet looked up the SBOM expectations. Is SHA3-256 mandatory for the SBOMs or should we be using a different one when SHA3-256 isn't available? build.xml:2312: java.lang.IllegalArgumentException: java.security.NoSuchAlgorithmException: SHA3-256 MessageDigest not available at org.apache.commons.codec.digest.DigestUtils.getDigest(DigestUtils.java:156) at org.apache.commons.codec.digest.DigestUtils.getSha3_256Digest(DigestUtils.java:261) at org.cyclonedx.util.BomUtils.getDigestForAlgorithm(BomUtils.java:147) at org.cyclonedx.util.BomUtils.calculateHashes(BomUtils.java:98) at org.cyclonedx.util.BomUtils.calculateHashes(BomUtils.java:71) at org.apache.ant.cyclonedx.Component.addHashes(Component.java:827) at org.apache.ant.cyclonedx.Component.toCycloneDxComponent(Component.java:666) at org.apache.ant.cyclonedx.Component.toMainCycloneDxComponent(Component.java:559) at org.apache.ant.cyclonedx.ToolData.cacheToolInformation(ToolData.java:93) at org.apache.ant.cyclonedx.ToolData.getToolInformation(ToolData.java:32) at org.apache.ant.cyclonedx.ComponentBomTask.createMetadata(ComponentBomTask.java:300) at org.apache.ant.cyclonedx.ComponentBomTask.createBom(ComponentBomTask.java:236) at org.apache.ant.cyclonedx.ComponentBomTask.execute(ComponentBomTask.java:223) ... Caused by: java.security.NoSuchAlgorithmException: SHA3-256 MessageDigest not available at sun.security.jca.GetInstance.getInstance(GetInstance.java:159) at java.security.Security.getImpl(Security.java:672) at java.security.MessageDigest.getInstance(MessageDigest.java:176) at org.apache.commons.codec.digest.DigestUtils.getMessageDigest(DigestUtils.java:214) at org.apache.commons.codec.digest.DigestUtils.getDigest(DigestUtils.java:154) ... 56 more -Jaikiran