Request for enhancement: Support KRB5_CONFIG

2012-06-20 Thread Weijun Wang
Hi All Oracle's Java currently looks for the krb5.conf file in this order: 1: If -Djava.security.krb5.conf defined, use it 2: If jre/lib/security/krb5.conf found, use it 3: Looking for the system default krb5.conf . /etc/krb5/krb5.conf on Solaris . /etc/krb5.conf on Linux . $WINDOWS/krb

hg: jdk8/tl/jdk: 7178483: Change version string for Embedded releases

2012-06-20 Thread david . holmes
Changeset: dfe5617c18b4 Author:dholmes Date: 2012-06-20 22:40 -0400 URL: http://hg.openjdk.java.net/jdk8/tl/jdk/rev/dfe5617c18b4 7178483: Change version string for Embedded releases Reviewed-by: dholmes, lancea Contributed-by: Gary Collins ! make/common/Defs-embedded.gmk

hg: jdk8/tl/langtools: 7174143: encapsulate doc comment table

2012-06-20 Thread jonathan . gibbons
Changeset: 5c0b3faeb0b0 Author:jjg Date: 2012-06-20 13:23 -0700 URL: http://hg.openjdk.java.net/jdk8/tl/langtools/rev/5c0b3faeb0b0 7174143: encapsulate doc comment table Reviewed-by: ksrini, mcimadamore ! src/share/classes/com/sun/tools/javac/api/JavacTrees.java ! src/share/classes

Re: 7168191: Signature validation can fail under certain circumstances

2012-06-20 Thread Vincent Ryan
On 06/20/12 03:40 PM, Michael StJohns wrote: At 09:49 AM 6/20/2012, Vincent Ryan wrote: Hello Michael, Thanks for your review comments. The cert path implementation in JDK currently doesn't support that AKID variant. I don't think that it is commonly used. Especially since RFC 5280 requires

Re: Code review request, CR 7174244, NPE in Krb5ProxyImpl.getServerKeys()

2012-06-20 Thread Steven Read
Xuelei Fan writes: > > Hi Steven, > > JSSE is a provider based framework. And compatibility is one of the > most important facts users concerns. That's to say, a provider > developed for JDK 6 is expected to work with JDK 7. As implies that > sometimes, we cannot changes the specification fo

Re: 7168191: Signature validation can fail under certain circumstances

2012-06-20 Thread Michael StJohns
At 09:49 AM 6/20/2012, Vincent Ryan wrote: >Hello Michael, > >Thanks for your review comments. > >The cert path implementation in JDK currently doesn't support that AKID >variant. I don't think that it is commonly used. Especially since RFC 5280 >requires the SKID extension to be present in all CA

Re: 7168191: Signature validation can fail under certain circumstances

2012-06-20 Thread Vincent Ryan
Hello Michael, Thanks for your review comments. The cert path implementation in JDK currently doesn't support that AKID variant. I don't think that it is commonly used. Especially since RFC 5280 requires the SKID extension to be present in all CA certs. Would you like me to file an RFE to add