Review Request: JDK-8173024 Replace direct use of AuthResources resource bundle from jdk.security.auth

2017-01-18 Thread Mandy Chung
Webrev at: http://cr.openjdk.java.net/~mchung/jdk9/webrevs/8173024/webrev.00/ sun.security.util.ResourcesMgr::getString(String s, String altBundleName) is one existing mechanism to get the localized string from AuthResources and have sun.security.util.AuthResources resource bundle encapsulate

Re: RFR release notes for multiple enhancements: krb5, SASL, JAAS, policytool

2017-01-18 Thread Weijun Wang
One more: https://bugs.openjdk.java.net/browse/JDK-8173018 (https://bugs.openjdk.java.net/browse/JDK-8076535) Deprecate the com.sun.jarsigner package The `com.sun.jarsigner` package is being deprecated. This includes the `ContentSigner` class, the `ContentSignerParameters` interface, and t

RFR release notes for multiple enhancements: krb5, SASL, JAAS, policytool

2017-01-18 Thread Weijun Wang
Hi All Please review the following release notes. For each one, I've listed the JBS URL for the release-note task, the original bug (in parentheses), the synopsis, and the intended release note text: https://bugs.openjdk.java.net/browse/JDK-8173011 (https://bugs.openjdk.java.net/browse/JDK-80

Re: RFR: 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default

2017-01-18 Thread Mandy Chung
> On Jan 18, 2017, at 1:23 PM, Sean Mullan wrote: > >> Similar to the feedback I suggest for JDK-8168075. We can move this >> initialization to the holder class and trigger the initialization in >> the SecurityManager constructor. > > For now, I would prefer to leave it as is. In an earlier re

Re: RFR: 8055206: Update SecurityManager::checkPackageAccess to restrict non-exported JDK packages by default

2017-01-18 Thread Sean Mullan
On 1/13/17 2:38 AM, Mandy Chung wrote: On Jan 9, 2017, at 11:25 AM, Sean Mullan wrote: Please review this JDK 9 change to make the SecurityManager::checkPackageAccess and checkPackageDefinition implementations restrict access to the same set of internal JDK packages as the module system. Thi

RFR 8172975: SecurityTools.keytool() needs to accept user input

2017-01-18 Thread Weijun Wang
Please review the code changes at root: http://cr.openjdk.java.net/~weijun/8172975/root/webrev.00/ jdk: http://cr.openjdk.java.net/~weijun/8172975/webrev.00/ The fix is in root repo. This is not an elegant solution because it uses a separate method to provide the response. This means you