[security-dev 01438]: Re: Ending support for Java 1.1 policy files
The webrev for this change is available at: http://cr.openjdk.java.net/~vinnie/6876158/webrev.00/ It removes dependencies on several long deprecated classes. A later changeset will follow this to remove Identity Database options from the jarsigner and keytool command-line utilities. Vincent Ryan wrote: Hello all, More than 11 years ago we introduced a new format for Java policy files in Java 1.2. We deprecated but retained support for the old Java 1.1 format. I'd like to propose that we now remove support for that legacy format. This would allow us to eliminate several hard-coded dependencies on a set of classes which were deprecated long ago. The change would form part of our JDK modularization effort. Thanks.
[security-dev 01439]: hg: jdk7/tl/jdk: 6876158: Remove dependencies on Signer, Certificate, Identity, IdentityScope classes from java.security pkg
Changeset: 327adb1c2224 Author:vinnie Date: 2009-12-07 17:06 + URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/327adb1c2224 6876158: Remove dependencies on Signer, Certificate, Identity, IdentityScope classes from java.security pkg Reviewed-by: alanb, mullan ! src/share/classes/com/sun/security/auth/PolicyFile.java ! src/share/classes/sun/security/pkcs/PKCS10.java - src/share/classes/sun/security/provider/IdentityDatabase.java ! src/share/classes/sun/security/provider/PolicyFile.java - src/share/classes/sun/security/provider/SystemIdentity.java - src/share/classes/sun/security/provider/SystemSigner.java ! src/share/classes/sun/security/tools/JarSigner.java ! src/share/classes/sun/security/tools/KeyTool.java ! src/share/classes/sun/security/x509/CertAndKeyGen.java - src/share/classes/sun/security/x509/X500Signer.java - src/share/classes/sun/security/x509/X509Cert.java - src/share/classes/sun/tools/jar/JarVerifierStream.java
[security-dev 01440]: hg: jdk7/tl/jdk: 3 new changesets
Changeset: c68f6b6b47fd Author:alanb Date: 2009-12-07 12:24 + URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/c68f6b6b47fd 6903753: (se) Selector should implement Closeable Reviewed-by: chegar, forax ! src/share/classes/java/nio/channels/Selector.java Changeset: 587fa61c0f07 Author:alanb Date: 2009-12-07 12:29 + URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/587fa61c0f07 6902010: (cl) Delay initialization of ClassLoader.parallelLoaders Reviewed-by: forax, mchung, valeriep ! src/share/classes/java/lang/ClassLoader.java Changeset: 63cab9078ac2 Author:alanb Date: 2009-12-07 20:25 + URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/63cab9078ac2 Merge - src/share/classes/sun/security/provider/IdentityDatabase.java - src/share/classes/sun/security/provider/SystemIdentity.java - src/share/classes/sun/security/provider/SystemSigner.java - src/share/classes/sun/security/x509/X500Signer.java - src/share/classes/sun/security/x509/X509Cert.java - src/share/classes/sun/tools/jar/JarVerifierStream.java
[security-dev 01444]: Re: hg: jdk7/tl/jdk: 6876158: Remove dependencies on Signer, Certificate, Identity, IdentityScope classes from java.security pkg
Seems there are more to clean: PolicyFile's ignoreIdentityScope() now default false, it should simply be always false and removed. JarSigner still includes IN_SCOPE words. Is Identity still usable now? Thanks Max On Dec 8, 2009, at 2:21 AM, vincent.r...@sun.com wrote: Changeset: 327adb1c2224 Author:vinnie Date: 2009-12-07 17:06 + URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/327adb1c2224 6876158: Remove dependencies on Signer, Certificate, Identity, IdentityScope classes from java.security pkg Reviewed-by: alanb, mullan ! src/share/classes/com/sun/security/auth/PolicyFile.java ! src/share/classes/sun/security/pkcs/PKCS10.java - src/share/classes/sun/security/provider/IdentityDatabase.java ! src/share/classes/sun/security/provider/PolicyFile.java - src/share/classes/sun/security/provider/SystemIdentity.java - src/share/classes/sun/security/provider/SystemSigner.java ! src/share/classes/sun/security/tools/JarSigner.java ! src/share/classes/sun/security/tools/KeyTool.java ! src/share/classes/sun/security/x509/CertAndKeyGen.java - src/share/classes/sun/security/x509/X500Signer.java - src/share/classes/sun/security/x509/X509Cert.java - src/share/classes/sun/tools/jar/JarVerifierStream.java
