Re: [Update]: JEP 249 (OCSP Stapling for TLS)

2015-06-29 Thread Xuelei Fan
src/java.base/share/classes/sun/security/ssl/ClientHandshaker.java == minor comment: 1603 if (!staplingActive) { 1604 fatalSE(Alerts.alert_unexpected_message, 1605 "Unexpected CertificateStatus

Re: [9] RFR: 8075301: Tests for sun.security.krb5.principal system property

2015-06-29 Thread Weijun Wang
Hi Siba There is one case not covered: 1. sun.security.krb5.principal not set 2. an existing principal set in jaas.conf In your jaas.conf.principal, a non-existing 1USER principal is used. In fact, why not add both accounts into the KDC and then check if the login user is what you expected?

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread John Rose
On Jun 29, 2015, at 10:48 AM, Doug Simon wrote: > > As I understand it, part of this change is to split intrinsification into one > method that does the checks that then calls a second method which the VM may > intrinsify on the assumption all checks have been performed by the first > method.

[9] RFR: 8075301: Tests for sun.security.krb5.principal system property

2015-06-29 Thread Sibabrata Sahoo
Hello, Please review this fix for 9. The test uses JAAS authentication over Kerberos. The kerberos5 principal name can be specified in the configuration entry by using the option principal. The principal can also be set using the system property sun.security.krb5.principal. This property

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Doug Simon
> On Jun 29, 2015, at 12:41 PM, Zoltán Majó wrote: > > Hi, > > > On 06/29/2015 11:45 AM, Andrew Haley wrote: >> Hi, >> >> On 29/06/15 10:41, Zoltán Majó wrote: >>> On 06/27/2015 10:05 AM, Andrew Haley wrote: On 25/06/15 12:49, Zoltán Majó wrote: > Problem: There is need to indicate J

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Doug Simon
> On Jun 29, 2015, at 3:01 PM, Andrew Haley wrote: > > On 06/29/2015 01:38 PM, Doug Simon wrote: > >> I seems just plain wrong for an intrinsic to not implement the same >> semantics as the intrinsified method. I would expect an intrinsic to >> perform all necessary runtime checks and only have

Re: [9] RFR: Remove sun.security.util.ObjectIdentifier.equals(ObjectIdentifier) method

2015-06-29 Thread Sean Mullan
Looks good to me. --Sean On 06/26/2015 06:25 PM, Jason Uh wrote: Please review this fix, which removes the overloaded sun.security.util.ObjectIdentifier.equals(ObjectIdentifier) method. webrev: http://cr.openjdk.java.net/~juh/8022444/00/ bug: https://bugs.openjdk.java.net/browse/JDK-8022444 T

Re: Review Request: 8130007: Update security tests to use Security.getProvider to get security provider

2015-06-29 Thread Sean Mullan
Looks good. --Sean On 06/26/2015 09:14 PM, Mandy Chung wrote: http://cr.openjdk.java.net/~mchung/jdk9/webrevs/8130007/webrev.00/ This patch removes the use of internal API and use Security.getProvider where appropriate. Valerie and I both contributes to this patch. Mandy

Re: RFR: 8046943: RSA Acceleration

2015-06-29 Thread Andrew Haley
On 06/29/2015 02:19 PM, David M. Lloyd wrote: > Out of curiosity, instead of e.g.: > >unsigned long *scratch = (unsigned long *)alloca(total_allocation); > > Could you not just use e.g.: > >unsigned long scratch[longwords * 4]; > > and avoid alloca altogether? No. Variable-length arra

Re: RFR: 8046943: RSA Acceleration

2015-06-29 Thread Andrew Haley
On 06/29/2015 02:19 PM, David M. Lloyd wrote: > Out of curiosity, instead of e.g.: > >unsigned long *scratch = (unsigned long *)alloca(total_allocation); > > Could you not just use e.g.: > >unsigned long scratch[longwords * 4]; > > and avoid alloca altogether? No. Variable-length are

Re: RFR: 8046943: RSA Acceleration

2015-06-29 Thread David M. Lloyd
On 06/29/2015 04:32 AM, Andrew Haley wrote: On 29/06/15 09:37, Vladimir Kozlov wrote: Hi, Andrew Did you file RFE for this change? 8046943 is JEP. No; I will do so. typo? "less" -> "more". + * number of ints in the number is less than this value we do not + * use the intrinsic. +

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Andrew Haley
On 06/29/2015 01:38 PM, Doug Simon wrote: > I seems just plain wrong for an intrinsic to not implement the same > semantics as the intrinsified method. I would expect an intrinsic to > perform all necessary runtime checks and only have the compiler omit > them if it can prove they are unnecessary.

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Zoltán Majó
Hi, On 06/29/2015 11:45 AM, Andrew Haley wrote: Hi, On 29/06/15 10:41, Zoltán Majó wrote: On 06/27/2015 10:05 AM, Andrew Haley wrote: On 25/06/15 12:49, Zoltán Majó wrote: Problem: There is need to indicate Java methods that are potentially intrinsified by JVM. It's a great idea but is it

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Andrew Haley
Hi, On 29/06/15 10:41, Zoltán Majó wrote: > > On 06/27/2015 10:05 AM, Andrew Haley wrote: >> On 25/06/15 12:49, Zoltán Majó wrote: >>> Problem: There is need to indicate Java methods that are potentially >>> intrinsified by JVM. >> It's a great idea but is it a good name? HotSpot is not the only

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Zoltán Majó
Hi Andrew, On 06/27/2015 10:05 AM, Andrew Haley wrote: On 25/06/15 12:49, Zoltán Majó wrote: Problem: There is need to indicate Java methods that are potentially intrinsified by JVM. It's a great idea but is it a good name? HotSpot is not the only Java VM. Do we expect people from to come a

Re: RFR: 8046943: RSA Acceleration

2015-06-29 Thread Andrew Haley
On 29/06/15 09:37, Vladimir Kozlov wrote: > Hi, Andrew > > Did you file RFE for this change? 8046943 is JEP. No; I will do so. > typo? "less" -> "more". > > + * number of ints in the number is less than this value we do not > + * use the intrinsic. > + */ > +private static fina

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Zoltán Majó
On 06/28/2015 09:21 PM, Alan Bateman wrote: On 26/06/2015 16:43, Zoltán Majó wrote: I updated the indentation as well. Here is the updated webrev: - top: http://cr.openjdk.java.net/~zmajo/8076112/top/webrev.06/ - jdk: http://cr.openjdk.java.net/~zmajo/8076112/jdk/webrev.06/ - hotspot: http:/

Re: [9] RFR(M): 8076112: Add @HotSpotIntrinsicCandidate annotation to indicate methods for which Java Runtime has intrinsics

2015-06-29 Thread Zoltán Majó
Hi James, thank you for your feedback! I've implemented the changes you suggested, here is the updated webrev: - top: http://cr.openjdk.java.net/~zmajo/8076112/top/webrev.07/ - jdk: http://cr.openjdk.java.net/~zmajo/8076112/jdk/webrev.07/ - hotspot: http://cr.openjdk.java.net/~zmajo/8076112/hot

Re: RFR: 8046943: RSA Acceleration

2015-06-29 Thread Vladimir Kozlov
Hi, Andrew Did you file RFE for this change? 8046943 is JEP. typo? "less" -> "more". + * number of ints in the number is less than this value we do not + * use the intrinsic. + */ +private static final int MONTGOMERY_INTRINSIC_THRESHOLD = 512; trailing spaces: src/java.base/sh

Re: RFR 8058849: test/sun/security/krb5/config/dns.sh needs to re-examined or replaced

2015-06-29 Thread Weijun Wang
On 06/29/2015 04:02 PM, Alan Bateman wrote: In any case, the change looks okay to me. Trivially, I think I would use specific imports rather than changing it a wildcard. IntelliJ IDEA automatically does this for me: 1. I am typing InitialDirCo and it hints InitialDirContext, I accept it 2.

Re: RFR 8058849: test/sun/security/krb5/config/dns.sh needs to re-examined or replaced

2015-06-29 Thread Alan Bateman
On 29/06/2015 08:55, Weijun Wang wrote: Please review the fix at http://cr.openjdk.java.net/~weijun/8058849/webrev.00 The overridden NamingManager needs to return a Context object whose getAttributes() method returns hard coded data. Since Context includes a lot of interface methods, choos

RFR 8058849: test/sun/security/krb5/config/dns.sh needs to re-examined or replaced

2015-06-29 Thread Weijun Wang
Please review the fix at http://cr.openjdk.java.net/~weijun/8058849/webrev.00 The overridden NamingManager needs to return a Context object whose getAttributes() method returns hard coded data. Since Context includes a lot of interface methods, choosing a non-abstract child and only overri