Re: LDAP Channel Binding

2020-01-20 Thread Bernd Eckenfels
Hello, Ok, so I have tested the GSSAPI method with a non-native (endured, non delegated) Kerberos login and it works with and without TLS no matter if channel binding is enforced or not. (GSS without TLS fails as expected with auth when request signing is required). So this either means the en

Re: SunPKCS11's Secmod and external modules in FIPS mode

2020-01-20 Thread Martin Balao
Ping. Any hint about this? Thanks, Martin.- On 12/20/19 10:03 PM, Martin Balao wrote: > Hello, > > SunPKCS11's Secmod in OpenJDK does not allow modules other than the NSS > Software Token to be configured in FIPS mode [1]. To give some context, > NSS represents modules internally with a structur

Re: RFR: 8218021: jarsigner strips the execute permission when signing a .zip file

2020-01-20 Thread Seán Coffey
Hi Philipp, thanks for the reply .. comments inline On 19/01/20 16:09, Philipp Kunz wrote: Hi Sean, I figure that distinguishing zips and jars is ambiguous in a certain way. After having signed a zip, it contains a manifest and is also a jar file according to the specs. That would mean we woul