There was plenty of warning. Oracle stopped using MD5 with RSA algorithm as the default JAR signing option with Java SE6, which was released in 2006.

RSA Security Inc. unexpectedly released the widely used RSA public-key encryption algorithm into the public domain ahead of this week's expiration of the patent on the algorithm -- a move that's ...