On 10/25/2018 11:09 PM, Weijun Wang wrote:
Hi Mike
Thanks for the feedback.
I understand the current SunMSCAPI implementation recognizes RSA keys only and
it's certainly incorrect to put something like getModulus() and
getPublicExponent() in a general CKey class. They will be fixed later.
Looks good to me
Tony
On 10/29/2018 10:41 AM, Xuelei Fan wrote:
Hi,
Please review the update:
http://cr.openjdk.java.net/~xuelei/8212738/webrev.00/
The signature algorithm name should be ""ecdsa_secp521r1_sha512",
instead of "ecdsa_secp512r1_sha512".
No new regression test. Trivial
Hi,
Please review the update:
http://cr.openjdk.java.net/~xuelei/8212738/webrev.00/
The signature algorithm name should be ""ecdsa_secp521r1_sha512",
instead of "ecdsa_secp512r1_sha512".
No new regression test. Trivial update, no impact on the behaviors
except the debug log message.
There are several ways in which JCA is deficient when viewed from the
standpoint of modern API design. At some point, we will probably want to
develop a new API that doesn't have these issues. I expect this to
require significant effort, though, and this sort of work gets lower
priority
Hi Alan, security guys,
I've proposed a CSR for this change now:
https://bugs.openjdk.java.net/browse/JDK-8213082.
I also updated the webrev, simplifying jdk.nio.zipfs.ZipUtils.permsFromFlags
and eliminating the WeakHashMap:
http://cr.openjdk.java.net/~clanger/webrevs/8213031.2/
Since I've
On 29/10/2018 09:26, Langer, Christoph wrote:
:
As per request from Alan, I’m adding security-dev to get a review from
security perspective.
For security-dev then I think it would be better to write-up a summary
of the overall proposal and the implications for applications/libraries
that
Hi,
here's an update of my webrev:
http://cr.openjdk.java.net/~clanger/webrevs/8213031.1/
I added synchronization to the updating of permCache in ZipUtils.java to avoid
concurrent modifications.
As per request from Alan, I'm adding security-dev to get a review from security
perspective.