Java 1.8u71 breaks Jenkins update site

[Robin Putters]

Hi there,

It looks like the latest Java update breaks the Jenkins update site once again (similar to JENKINS-31089 with 1.8u65).
Release notes: http://www.oracle.com/technetwork/java/javase/8u71-relnotes-2773756.html

Results from Jenkins 1.642.1/1.8u71 (works fine with 1.8u65):

ERROR: Signature verification failed in update site 'default'
java.security.cert.CertPathValidatorException: Algorithm constraints check failed: MD5withRSA at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(Unknown Source) at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source) at sun.security.provider.certpath.PKIXCertPathValidator.validate(Unknown Source) at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(Unknown Source) at java.security.cert.CertPathValidator.validate(Unknown Source) at org.jvnet.hudson.crypto.CertificateUtil.validatePath(CertificateUtil.java:93)
at jenkins.util.JSONSignatureValidator.verifySignature(JSONSignatureValidator.java:76)
at hudson.model.UpdateSite.verifySignature(UpdateSite.java:222)
at hudson.model.UpdateSite.updateData(UpdateSite.java:201)
at hudson.model.UpdateSite.updateDirectlyNow(UpdateSite.java:173)
at hudson.PluginManager.doCheckUpdatesServer(PluginManager.java:959)
at jenkins.model.DownloadSettings$DailyCheck.execute(DownloadSettings.java:118)
at hudson.model.AsyncPeriodicWork$1.run(AsyncPeriodicWork.java:53)
at java.lang.Thread.run(Unknown Source)

I wasn't able to sign up for the Jenkins Jira, so I hope this is the right place to report it.

Regards,
Robin