Re: 7007966: Add Brainpool ECC support (RFC 5639)

2010-12-23 Thread Samuel Lidén Borell
Hi, I've never worked with transport security so it's not really my area, and I don't know of any efforts to get Brainpool registered with IANA. Regards, Samuel Lidén Borell On Wed, 22 Dec 2010 22:08:39 +0800 Xuelei Fan xuelei@oracle.com wrote: Hi, To use those EC curves in TLS,

RE: Support for TLS 1.1 1.2

2010-12-23 Thread martin.corr
Brad, Has there been any move to support TLS in oracle JRE? In terms of the continued use of SHA-1, here is a useful site that summarises various recommendations and most state that SHA-1 should be phased out now. http://www.keylength.com/en/3/ I can see that openjdk now includes TLS 1.2

hg: jdk7/tl/corba: 8 new changesets

2010-12-23 Thread lana . steuck
Changeset: ccc68bc57c82 Author:cl Date: 2010-12-16 18:17 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/corba/rev/ccc68bc57c82 Added tag jdk7-b122 for changeset 1523a060032c ! .hgtags Changeset: 88ac4daf5d0e Author:yhuang Date: 2010-12-05 20:09 -0800 URL:

hg: jdk7/tl: 17 new changesets

2010-12-23 Thread lana . steuck
Changeset: d61adc5101e0 Author:cl Date: 2010-12-16 18:17 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/rev/d61adc5101e0 Added tag jdk7-b122 for changeset f1591eed71f6 ! .hgtags Changeset: 55566844106b Author:ohair Date: 2010-12-06 10:37 -0800 URL:

hg: jdk7/tl/jaxws: 7 new changesets

2010-12-23 Thread lana . steuck
Changeset: f74fc1dbef46 Author:cl Date: 2010-12-16 18:17 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jaxws/rev/f74fc1dbef46 Added tag jdk7-b122 for changeset 17b6c48a3449 ! .hgtags Changeset: 0f117d4f6847 Author:ohair Date: 2010-12-03 08:44 -0800 URL:

hg: jdk7/tl/jdk: 76 new changesets

2010-12-23 Thread lana . steuck
Changeset: e8ef99adf42b Author:cl Date: 2010-12-16 18:18 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/e8ef99adf42b Added tag jdk7-b122 for changeset ac311eb325bf ! .hgtags Changeset: beb9f3298ad3 Author:andrew Date: 2010-11-23 02:17 + URL:

hg: jdk7/tl/langtools: 7008869: Debug printlns accidentally added to make/build.xml

2010-12-23 Thread jim . holmlund
Changeset: dd38bab326a3 Author:jjh Date: 2010-12-23 10:08 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/langtools/rev/dd38bab326a3 7008869: Debug printlns accidentally added to make/build.xml Summary: Delete bogus echo statements Reviewed-by: ksrini ! make/build.xml

Re: review request for 7008713: diamond conversion of kerberos5 and security tools

2010-12-23 Thread Stuart Marks
On 12/22/10 6:19 PM, Brad Wetmore wrote: Using the diamond operator definitely makes the code *shorter*. Whether it's *better* doesn't necessarily follow from that. In most cases, though, using diamond is better, I think. I'd be curious if you saw any instances where you thought that it would

Re: review request for 7005608: diamond conversion of JCA and crypto providers

2010-12-23 Thread Stuart Marks
On 12/22/10 6:17 PM, Brad Wetmore wrote: You need to update the Copyright updates on these files to include 2010. Is this the standard, to update the copyright to the current year anytime the file is touched? If so, then yes, I can do this. Minor nit, can you add a space in line 221

Re: review request for 7005608: diamond conversion of JCA and crypto providers

2010-12-23 Thread Mandy Chung
On 12/23/10 12:40 PM, Stuart Marks wrote: On 12/22/10 6:17 PM, Brad Wetmore wrote: You need to update the Copyright updates on these files to include 2010. Is this the standard, to update the copyright to the current year anytime the file is touched? If so, then yes, I can do this. This

hg: jdk7/tl/jdk: 7002386: (launcher) fix XshowSettings

2010-12-23 Thread kumar . x . srinivasan
Changeset: 5beec82bf20d Author:ksrini Date: 2010-12-23 13:51 -0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/5beec82bf20d 7002386: (launcher) fix XshowSettings Reviewed-by: darcy, mchung, naoto ! src/share/bin/java.c ! src/share/classes/sun/launcher/LauncherHelper.java !

Re: 7007966: Add Brainpool ECC support (RFC 5639)

2010-12-23 Thread Brad Wetmore
To use those EC curves in TLS, IANA need to register these curves[*]. Do you know any effort to use these curves in TLS? Xuelei was primarily asking about this from the TLS perspective. RFC 5639 just claims its use would be consistent with the existing TLS ECC approaches, but I don't know

Re: review request for 7008713: diamond conversion of kerberos5 and security tools

2010-12-23 Thread Brad Wetmore
On 12/23/2010 11:42 AM, Stuart Marks wrote: On 12/22/10 6:19 PM, Brad Wetmore wrote: Using the diamond operator definitely makes the code *shorter*. Whether it's *better* doesn't necessarily follow from that. In most cases, though, using diamond is better, I think. I'd be curious if you

Re: review request for 7005608: diamond conversion of JCA and crypto providers

2010-12-23 Thread Brad Wetmore
Minor nit, can you add a space in line 221 between BigInteger,BlindingParameters [and Max replied] I thought the formal style is no-space. At least in Map.java it's public interface MapK,V. I'm not familiar with any formal style. The original Java code conventions doc [1] hasn't been

Re: review request for 7005608: diamond conversion of JCA and crypto providers

2010-12-23 Thread Kelly O'Hair
On Dec 23, 2010, at 6:17 PM, Brad Wetmore wrote: On 12/23/2010 12:58 PM, Mandy Chung wrote: On 12/23/10 12:40 PM, Stuart Marks wrote: On 12/22/10 6:17 PM, Brad Wetmore wrote: You need to update the Copyright updates on these files to include 2010. Is this the standard, to update the

Re: review request for 7005608: diamond conversion of JCA and crypto providers

2010-12-23 Thread Brad Wetmore
HomerSimpson If people update it themselves, manually, then they avoid an additional changeset modifying their files. So it's still ok for people to manually update the second year. But it can be considered optional again. Whoo hoo! And SunJDK 6/5/1.4.2? (Sorry, OpenJDK folks, but had to

Re: Support for TLS 1.1 1.2

2010-12-23 Thread Brad Wetmore
On 12/23/2010 7:21 AM, martin.c...@bt.com wrote: Brad, Has there been any move to support TLS in oracle JRE? I'm a little confused by the question, or maybe the confusion lies in how the OpenJDK 7 is part of OracleJDK. We take the OpenJDK 7 source and make some modificiations (adding in