Re: [15] RFR 8241761 : Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)

2020-04-01 Thread Ivan Gerasimov
.sasl/share/classes/javax/security/sasl/SaslServer.java: 57 * status = ldap.sendBindResponse(mechanism, challenge, 58 * SASL_BIND_IN_PROGRESS); Thanks, Max On Mar 31, 2020, at 5:39 AM, Ivan Gerasimov wrote: Hello! The fix follows up on JDK-8241727 [1]. This

[15] RFR 8241761 : Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)

2020-03-30 Thread Ivan Gerasimov
://bugs.openjdk.java.net/browse/JDK-8241761 WEBREV: http://cr.openjdk.java.net/~igerasim/8241761/00/webrev/ Thank in advance! [1] https://bugs.openjdk.java.net/browse/JDK-8241727 -- With kind regards, Ivan Gerasimov

Re: RFR [15] 8241014: Miscellaneous typos in documentation comments

2020-03-20 Thread Ivan Gerasimov
bject) Use either: whose referent is equal to this referent, or whose referent equals this referent, The former is easier just delete the ’s’. Other bits look good. Paul. On Mar 13, 2020, at 7:03 PM, Ivan Gerasimov wrote: Hi Pavel! Can this please be combined with my collec

Re: RFR 8163251 : Hard coded loop limit prevents reading of smart card data greater than 8k

2020-02-13 Thread Ivan Gerasimov
ion count would be at most 256. So far we are on the same page. With the latest webrev (webrev.01), it seems that the loop will only be run 255 instead of 256 times as k is incremented before comparison. Thus, I think we should fix the check. Valerie On 2/11/2020 12:18 PM, Ivan Gerasimov wrot

Re: RFR 8163251 : Hard coded loop limit prevents reading of smart card data greater than 8k

2020-02-11 Thread Ivan Gerasimov
we have a way to test this?  Aka: There should be a test. Roger On 2/10/20 8:07 PM, Ivan Gerasimov wrote: Thank you Michael! It's a good point about maximum length. Here's the updated webrev with the new System property dropped and the increased number of iterations: http:/

Re: RFR 8163251 : Hard coded loop limit prevents reading of smart card data greater than 8k

2020-02-11 Thread Ivan Gerasimov
quot;, so the actual iteration count is reduced by one. Should the iteration count be 256 or 257? If the actual count should be 257, then may be the check needs to be changed to k++ from ++k? Valerie On 2/10/2020 5:07 PM, Ivan Gerasimov wrote: Thank you Michael! It's a good point about ma

Re: RFR 8163251 : Hard coded loop limit prevents reading of smart card data greater than 8k

2020-02-10 Thread Ivan Gerasimov
wrote: On 2/10/2020 6:49 PM, Ivan Gerasimov wrote: Hello! Current implementation of the method javax.smartcardio.CardChannel.transmit() has an internal limitation on the maximum allowed amount of the transmitted data. This limitation is dictated by the maximum number of iterations to transmit

RFR 8163251 : Hard coded loop limit prevents reading of smart card data greater than 8k

2020-02-10 Thread Ivan Gerasimov
a.net/browse/JDK-8163251 WEBREV: http://cr.openjdk.java.net/~igerasim/8163251/00/webrev/ If there is an agreement on the proposal, I'll file a CSR to document a new System property. Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: RFR 8233884 : Avoid looking up standard charsets in security libraries

2019-11-12 Thread Ivan Gerasimov
Thank you Seán! Pushed. On 11/12/19 12:35 AM, Seán Coffey wrote: On 11/11/2019 20:56, Ivan Gerasimov wrote: Thank you Seán for reviewing! On 11/11/19 7:56 AM, Seán Coffey wrote: Nice work Ivan. I see you've some clean up done on exception handling also. I might have a concern on

Re: RFR 8233884 : Avoid looking up standard charsets in security libraries

2019-11-11 Thread Ivan Gerasimov
updated webrev with this only change, comparing to the previous one: http://cr.openjdk.java.net/~igerasim/8233884/01/webrev/ With kind regards, Ivan Everything else looked fine to me. Regards, Sean. On 10/11/19 09:47, Ivan Gerasimov wrote: Hello! There are many places in the security l

RFR 8233884 : Avoid looking up standard charsets in security libraries

2019-11-10 Thread Ivan Gerasimov
please help review this relatively lengthy (in terms of the affected files), though mostly straight-forward cleanup? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8233884 WEBREV: http://cr.openjdk.java.net/~igerasim/8233884/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: RFR (XS) 8231859 : Extra dash after the exception name in @throws clause of javadoc

2019-10-16 Thread Ivan Gerasimov
Thank you Weijun! Pushed. On 10/16/19 6:42 PM, Weijun Wang wrote: The change looks fine to me. Thanks, Max On Oct 17, 2019, at 9:33 AM, Ivan Gerasimov wrote: Hello! This is a javadoc-only cleanup. In a few places a dash was used between the exception name and the description under the

RFR (XS) 8231859 : Extra dash after the exception name in @throws clause of javadoc

2019-10-16 Thread Ivan Gerasimov
/PermissionCollection.html#add(java.security.Permission) Would you please help review a trivial cleanup? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8231859 WEBREV: http://cr.openjdk.java.net/~igerasim/8231859/00/webrev/ -- With kind regards, Ivan Gerasimov

Re: RFR (S) 8230407 : SocketPermission and FilePermission action list allows leading comma

2019-10-03 Thread Ivan Gerasimov
Hi Chris! On 10/3/19 8:05 AM, Chris Hegarty wrote: Ivan, On 3 Oct 2019, at 04:41, Ivan Gerasimov wrote: ... So, I filed CSR: https://bugs.openjdk.java.net/browse/JDK-8231805 to cover the addition of @throws paragraph in the javadoc of SocketPermission. I would really appreciate it, if

Re: RFR (S) 8230407 : SocketPermission and FilePermission action list allows leading comma

2019-10-03 Thread Ivan Gerasimov
On 10/2/19 11:40 PM, Peter Levart wrote: Hi Ivan, On 10/1/19 10:26 PM, Ivan Gerasimov wrote: Hello! The constructors of SocketPermission and FilePermission expect a String argument with comma-separated list of actions. If the list is malformed, then the constructors throw IllegalArgumentExce

Re: RFR (S) 8230407 : SocketPermission and FilePermission action list allows leading comma

2019-10-02 Thread Ivan Gerasimov
It's not like if we used to allow commas in arbitrary places and stopped doing that.  Instead, it just turned out that the code fails to catch one specific pattern of malformed action list. With kind regards, Ivan Cheers, -Joe On 10/2/2019 4:26 PM, Ivan Gerasimov wrote: Hi Chris! Than

Re: RFR (S) 8230407 : SocketPermission and FilePermission action list allows leading comma

2019-10-02 Thread Ivan Gerasimov
penjdk.java.net/~igerasim/8230407/01/webrev/ With kind regards, Ivan On 10/2/19 6:44 AM, Chris Hegarty wrote: Ivan, On 01/10/2019 21:26, Ivan Gerasimov wrote: Hello! The constructors of SocketPermission and FilePermission expect a String argument with comma-separated list of actions.

RFR (S) 8230407 : SocketPermission and FilePermission action list allows leading comma

2019-10-01 Thread Ivan Gerasimov
with a leading comma. Would you please help review a simple fix, which will make the behavior more consistent? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8230407 WEBREV: http://cr.openjdk.java.net/~igerasim/8230407/00/webrev/ -- With kind regards, Ivan Gerasimov

Re: RFR (XS) 8230415 : Avoid redundant permission checking in FilePermissionCollection and SocketPermissionCollection

2019-09-30 Thread Ivan Gerasimov
Thank you Sean for reviewing! With kind regards, Ivan On 9/27/19 7:20 AM, Sean Mullan wrote: Hi Ivan, The fix looks good. Good catch. --Sean On 8/30/19 7:32 PM, Ivan Gerasimov wrote: Hello! In the two implementations of PermissionCollection.implies(Permission), all the permissions are

RFR (XS) 8230415 : Avoid redundant permission checking in FilePermissionCollection and SocketPermissionCollection

2019-08-30 Thread Ivan Gerasimov
m) will be executed. The fix does not change the behavior, but helps avoid unnecessary calls to impliesIgnoreMask(). Would you please help review a trivial fix? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8230415 WEBREV: http://cr.openjdk.java.net/~igerasim/8230415/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

RFR 8211360 : Change #if DEF to #if defined(DEF)

2019-08-20 Thread Ivan Gerasimov
https://bugs.openjdk.java.net/browse/JDK-8211360 WEBREV: http://cr.openjdk.java.net/~igerasim/8211360/00/webrev/ Mach5 control build/testing went fine on all platforms. Would you please help review? -- With kind regards, Ivan Gerasimov

Re: RFR 8226543 : Reduce GC pressure during message digest calculations in password-based encryption

2019-06-25 Thread Ivan Gerasimov
Thank you Sean for review! On 6/25/19 10:55 AM, Sean Mullan wrote: Hi Ivan, This fix looks good. --Sean On 6/20/19 10:22 PM, Ivan Gerasimov wrote: Hello! In PBES1Core.deriveCipherKey() there are loops that look like following: for (int i = 0; i < iCount

RFR 8226543 : Reduce GC pressure during message digest calculations in password-based encryption

2019-06-20 Thread Ivan Gerasimov
ttp://cr.openjdk.java.net/~igerasim/8226543/00/webrev/ No new regression test, as the behavior was not changed. Mach5 control job is green (tiers 1-4 on all supported platforms). -- With kind regards, Ivan Gerasimov

Re: RFR: 8226307: Curve names should be case-insensitive

2019-06-20 Thread Ivan Gerasimov
://cr.openjdk.java.net/~mullan/webrevs/8226307/webrev.00/ bug: https://bugs.openjdk.java.net/browse/JDK-8226307 Thanks, Sean -- With kind regards, Ivan Gerasimov

Re: RFR 8223003: SunMSCAPI keys are not cleaned up

2019-04-26 Thread Ivan Gerasimov
oreg-other with a comment. Thanks, Max -- With kind regards, Ivan Gerasimov

Re: [12u] RFR 8221801 : Update src/java.base/share/legal/public_suffix.md

2019-04-02 Thread Ivan Gerasimov
Thank you Weijun! On 4/2/19 5:46 PM, Weijun Wang wrote: Hi Ivan, Code change looks fine to me. The system property is also new to me and it saved a lot of "../../..". Thanks, Max On Apr 3, 2019, at 5:52 AM, Ivan Gerasimov wrote: Hello! I'm seeking to backport the fix

[12u] RFR 8221801 : Update src/java.base/share/legal/public_suffix.md

2019-04-02 Thread Ivan Gerasimov
. WEBREV: http://cr.openjdk.java.net/~igerasim/8221801/00/webrev/ Would you please help review? -- With kind regards, Ivan Gerasimov

RFR (XS) 8217344 : Make comparison overflow-aware in ECDHKeyAgreement.engineGenerateSecret()

2019-01-17 Thread Ivan Gerasimov
Hello! Would you please help review a trivial fix to avoid a possible arithmetic overflow in comparison? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8217344 WEBREV: http://cr.openjdk.java.net/~igerasim/8217344/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: RFR 6722928: Support SSPI as a native GSS-API provider

2018-12-19 Thread Ivan Gerasimov
ks Max [1] https://bugs.openjdk.java.net/browse/JDK-8200468 -- With kind regards, Ivan Gerasimov

Re: RFR 8210476: sun/security/mscapi/PrngSlow.java fails with Still too slow

2018-11-28 Thread Ivan Gerasimov
+Cleaner.create().register(this, +() -> releaseContext(ctxt)); Thanks Max -- With kind regards, Ivan Gerasimov

RFR 8201355 : Avoid native memory allocation in sun.security.mscapi.PRNG.generateSeed

2018-10-17 Thread Ivan Gerasimov
? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8201355 WEBREV: http://cr.openjdk.java.net/~igerasim/8201355/00/webrev/ -- With kind regards, Ivan Gerasimov

Re: RFR (XS) 8200381 : Typos in javadoc - missing verb "be" and alike

2018-10-01 Thread Ivan Gerasimov
://cr.openjdk.java.net/~igerasim/8200381/01/webrev/ With kind regards, Ivan On 10/1/18 4:58 PM, Bradford Wetmore wrote: I checked the last 6 only (SSLEngine+). Looks good. Brad On 10/1/2018 4:37 PM, Ivan Gerasimov wrote: Hello! A handful of a few similar typos across core-libs/security-libs

RFR (XS) 8200381 : Typos in javadoc - missing verb "be" and alike

2018-10-01 Thread Ivan Gerasimov
Hello! A handful of a few similar typos across core-libs/security-libs areas. BUGURL: https://bugs.openjdk.java.net/browse/JDK-8200381 WEBREV: http://cr.openjdk.java.net/~igerasim/8200381/00/webrev/ Would you please help review the fix? -- With kind regards, Ivan Gerasimov

Re: RFR 8210786 : Typo s/overriden/overridden/ in several places

2018-09-15 Thread Ivan Gerasimov
ly in java.desktop. I think I'll create another separate issue and will assign it to someone from the jdk client team. Thanks Max On Sep 15, 2018, at 2:03 PM, Ivan Gerasimov wrote: Hello! This is a followup of the fix of JDK-8210785 (Trivial typo fix in X509ExtendedKeyManager javadoc).

RFR 8210786 : Typo s/overriden/overridden/ in several places

2018-09-14 Thread Ivan Gerasimov
/8210786/00/webrev/ -- With kind regards, Ivan Gerasimov

Re: RFR 6474858 : CardChannel.transmit(CommandAPDU) throws unexpected ArrayIndexOutOfBoundsException

2018-08-24 Thread Ivan Gerasimov
Thank you Valerie! With kind regards, Ivan On 8/23/18 5:18 PM, Valerie Peng wrote: Changes look good. Thanks, Valerie On 8/23/2018 1:40 PM, Ivan Gerasimov wrote: Hello! This is a smartcardio related issue. If CardChannel.transmit() needs to issue an additional command, it reuses the

RFR 6474858 : CardChannel.transmit(CommandAPDU) throws unexpected ArrayIndexOutOfBoundsException

2018-08-23 Thread Ivan Gerasimov
you please help review? BUGURL: https://bugs.openjdk.java.net/browse/JDK-6474858 WEBREV: http://cr.openjdk.java.net/~igerasim/6474858/00/webrev/ -- With kind regards, Ivan Gerasimov

RFR (XS) 8209851 : Algorithm name is compared via reference identity

2018-08-22 Thread Ivan Gerasimov
help review the trivial fix? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8209851 WEBREV: http://cr.openjdk.java.net/~igerasim/8209851/00/webrev/ -- With kind regards, Ivan Gerasimov

Re: RFR: JDK-8209129 :Further improvements to cipher buffer management

2018-08-22 Thread Ivan Gerasimov
r good catch! updated webrev : http://cr.openjdk.java.net/~coffeys/webrev.8209129.v3/webrev/ regards, Sean. Otherwise fine. Thanks Max On Aug 17, 2018, at 12:53 AM, Seán Coffey wrote: Find new webrev here Max : http://cr.openjdk.java.net/~coffeys/webrev.8209129.v2/webrev/ regards : -- With kind regards, Ivan Gerasimov

Re: hg: jdk/jdk: 8186186: GSSContext.isEstablished() can return true on error state

2018-08-22 Thread Ivan Gerasimov
urity/krb5/auto/SpnegoUnknownMech.java -- With kind regards, Ivan Gerasimov

RFR 8186186 : GSSContext.isEstablished() can return true on error state

2018-08-21 Thread Ivan Gerasimov
Hello! Would you please help review the fix? BUGURL: https://bugs.openjdk.java.net/browse/JDK-8186186 WEBREV: http://cr.openjdk.java.net/~igerasim/8186186/01/webrev/ With kind regards, Ivan

RFR 8207031 : CKM_SSL3_PRE_MASTER_KEY_GEN used without need in P11RSACipher.class

2018-07-12 Thread Ivan Gerasimov
/8207031/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: [8u-dev] Request for Review and Approval to Backport 8189760 : sun/security/ssl/CertPathRestrictions/TLSRestrictions.java failed with unexpected Exception intermittently

2018-05-31 Thread Ivan Gerasimov
Thanks Seán! On 5/31/18 12:13 PM, Seán Coffey wrote: Looks fine Ivan. Approved for jdk8u-dev. regards, Sean.

[8u-dev] Request for Review and Approval to Backport 8189760 : sun/security/ssl/CertPathRestrictions/TLSRestrictions.java failed with unexpected Exception intermittently

2018-05-31 Thread Ivan Gerasimov
k-cpu/open/rev/2d250a0174a6 Jdk 11 review: http://mail.openjdk.java.net/pipermail/security-dev/2018-January/016675.html Thanks in advance! -- With kind regards, Ivan Gerasimov

RFR 8202086 : Improve performance characteristics of sun.security.util.MemoryCache

2018-04-30 Thread Ivan Gerasimov
/8186628_ssl_session_cache_scalability/webrev.01/ -- With kind regards, Ivan Gerasimov

[8u-dev] 8193171 : keytool -list displays "JKS" for a PKCS12 keystore

2018-04-30 Thread Ivan Gerasimov
/8193171/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: about JDK-8186628

2018-04-20 Thread Ivan Gerasimov
nezih yigitbasi wrote: Ivan, thanks for the information. Any ideas about when one of these solutions can be released? Nezih 2018-04-20 9:22 GMT-07:00 Ivan Gerasimov <mailto:[email protected]>>: Hello Nezih! This issue is still being discussed off-list. There have bee

Re: about JDK-8186628

2018-04-20 Thread Ivan Gerasimov
regarding that issue. Thanks, Nezih -- With kind regards, Ivan Gerasimov

Re: RFR 8178370 : [TEST_BUG] java/security/Signature/SignatureLength.java fails

2018-03-23 Thread Ivan Gerasimov
Ping. Can I please have a review for this test fix? Thanks in advance! Ivan On 3/6/18 1:01 PM, Ivan Gerasimov wrote: Hello! The regression test SignatureLength.java was seen to fail on some Solaris systems. This is because signature verifier from SunPKCS11-Solaris provider doesn&#

Re: RFR 8199198: Remove unused functions in jdk.crypto.mscapi native code

2018-03-06 Thread Ivan Gerasimov
It looks good! With kind regards, Ivan On 3/6/18 6:19 PM, Weijun Wang wrote: Please take a review at http://cr.openjdk.java.net/~weijun/8199198/webrev.00 I just removed the 3 unused functions. They were there from the beginning (2005) but had never existed in any Java class. Thanks Ma

RFR 8178370 : [TEST_BUG] java/security/Signature/SignatureLength.java fails

2018-03-06 Thread Ivan Gerasimov
EBREV: http://cr.openjdk.java.net/~igerasim/8178370/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

[8u-dev] Request to Review and for Approval to Backport 8192987 : keytool should remember real storetype if it is not provided

2018-01-02 Thread Ivan Gerasimov
ebrev/ JDK 10 Change: http://hg.openjdk.java.net/jdk/jdk/rev/e3b6cb90d7ce JDK 10 Review: http://mail.openjdk.java.net/pipermail/security-dev/2017-December/016613.html Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: [8u-dev] Request to Review and for Approval to Backport : 8193156: Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903

2017-12-13 Thread Ivan Gerasimov
Thank you Sean for review! On 12/13/17 11:00 AM, Sean Mullan wrote: Looks fine to me. --Sean On 12/13/17 1:02 PM, Ivan Gerasimov wrote: Ping! The patch is the anti-delta of the fixes, so we're just reverting to what we used to have prior these fixes. Would you please help review

Re: [8u-dev] Request to Review and for Approval to Backport : 8193156: Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903

2017-12-13 Thread Ivan Gerasimov
Ping! The patch is the anti-delta of the fixes, so we're just reverting to what we used to have prior these fixes. Would you please help review this and approve the backport? With kind regards, Ivan On 12/11/17 9:30 AM, Ivan Gerasimov wrote: Hello! I'm seeking an approval t

[8u-dev] Request to Review and for Approval to Backport : 8193156: Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903

2017-12-11 Thread Ivan Gerasimov
56/01/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: RFR 8193156 : Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903

2017-12-07 Thread Ivan Gerasimov
hanks, Sean On 12/6/17 8:35 PM, Ivan Gerasimov wrote: Hello! A regression caused by the recent fixes of the ProtectionDomain cache was observed. Thus, it is proposed to revert the corresponding changes for now. Would you please approve this patch, which is actually an anti-delta of three ment

RFR 8193156 : Need to backout fixes for JDK-8058547, JDK-8055753, JDK-8085903

2017-12-06 Thread Ivan Gerasimov
/browse/JDK-8193156 WEBREV: http://cr.openjdk.java.net/~igerasim/8193156/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

Re: [10] XXS 8187985 : Broken certificate number in debug output

2017-12-02 Thread Ivan Gerasimov
Thank you Max! Yes, I've just added noreg-trivial. With kind regards, Ivan On 12/2/17 11:26 PM, Weijun Wang wrote: Hi Ivan The change looks fine. Do you want to add a noreg-trivial or noreg-hard label? Thanks Max On Dec 3, 2017, at 3:03 PM, Ivan Gerasimov wrote: Hello! It was no

[10] XXS 8187985 : Broken certificate number in debug output

2017-12-02 Thread Ivan Gerasimov
jdk.java.net/browse/JDK-8187985 WEBREV: http://cr.openjdk.java.net/~igerasim/8187985/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

[10] XXS 8187497 : Redundant variable assignment in Java_sun_security_jgss_wrapper_GSSLibStub_getMic

2017-12-01 Thread Ivan Gerasimov
Hello! There is a redundant variable assignment, which seems to be copy-paste of the line 1404. BUGURL: https://bugs.openjdk.java.net/browse/JDK-8187497 WEBREV: http://cr.openjdk.java.net/~igerasim/8187497/00/webrev/ Would you please help review this trivial fix? -- With kind regards, Ivan

Re: [10] RFR 8068024 : Null pointer dereference in jdk/src/macosx/native/apple/security/KeystoreImpl.m

2017-11-22 Thread Ivan Gerasimov
Thank you for review! Pushed. With kind regards, Ivan On 11/21/17 10:32 PM, Weijun Wang wrote: This looks fine to me. Thanks Max On Nov 22, 2017, at 9:47 AM, Ivan Gerasimov wrote: Hello! Here's a simple fix to correctly handle the malloc call returning NULL. BUGURL:

Re: [10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-22 Thread Ivan Gerasimov
ize). With kind regards, Ivan Regards, Peter On 11/21/17 14:16, Ivan Gerasimov wrote: Thanks Xuelei for the comment! On 11/20/17 8:50 PM, Xuelei Fan wrote: Hi Ivan, I understand the desire of performance improvement. But I don't think avoiding the use of cache is the price we want

[10] RFR 8068024 : Null pointer dereference in jdk/src/macosx/native/apple/security/KeystoreImpl.m

2017-11-21 Thread Ivan Gerasimov
Hello! Here's a simple fix to correctly handle the malloc call returning NULL. BUGURL: https://bugs.openjdk.java.net/browse/JDK-8068024 WEBREV: http://cr.openjdk.java.net/~igerasim/8068024/00/webrev/ Would you please help review? -- With kind regards, Ivan Gerasimov

Re: [10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-21 Thread Ivan Gerasimov
help to improve performance. With kind regards, Ivan Xuelei On 11/20/2017 5:36 PM, Ivan Gerasimov wrote: Gentle ping. If people agree on the approach, I'll go ahead and file a CCC request for the new recognized system property. With kind regards, Ivan On 11/7/17 6:24 PM, Ivan

Re: [10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-20 Thread Ivan Gerasimov
Gentle ping. If people agree on the approach, I'll go ahead and file a CCC request for the new recognized system property. With kind regards, Ivan On 11/7/17 6:24 PM, Ivan Gerasimov wrote: Hello everybody! The class sun.security.ssl.SSLSessionContextImpl maintains caches for

Re: [10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-10 Thread Ivan Gerasimov
e, it would be able to take advantage of re-using the contexts. Though I'm not sure how to size or re-size the index based on load or ... I would think that using a 'small' cache size would bound the expunge time and still allow some-reuse. $.02, Roger On 11/8/2017 2:09 PM,

Re: [10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-08 Thread Ivan Gerasimov
ttp://bernd.eckenfels.net *From:* security-dev on behalf of Ivan Gerasimov *Sent:* Wednesday, November 8, 2017 3:24:54 AM *To:* [email protected] *Subject:* [10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck He

[10] RFR : 8186628 : SSL session cache can cause a scalability bottleneck

2017-11-07 Thread Ivan Gerasimov
, Ivan Gerasimov

Re: [10] RFR 8186654 : Poor quality of sun.security.util.Cache.EqualByteArray.hashCode()

2017-09-07 Thread Ivan Gerasimov
On 9/7/17 10:25 AM, Seán Coffey wrote: Looks good to me Ivan. Thanks Seán! With kind regards, Ivan regards, Sean. On 23/08/2017 21:54, Ivan Gerasimov wrote: Hello! An auxiliary class EqualByteArray implements hashCode() in a way that small changes to the content do not change the hash

Re: [10] XXS RFR 8187023: Cannot read pkcs11 config file in UTF-16 environment

2017-08-31 Thread Ivan Gerasimov
On 8/31/17 1:44 PM, Anthony Scarpino wrote: On 08/31/2017 01:10 PM, Ivan Gerasimov wrote: Hello! Currently, when reading the pkcs11 config file, the default encoding is assumed. This causes errors when the encoding is set to UTF-16. Would you please help review the trivial fix? Bug

[10] XXS RFR 8187023: Cannot read pkcs11 config file in UTF-16 environment

2017-08-31 Thread Ivan Gerasimov
/8187023/00/webrev/ -- With kind regards, Ivan Gerasimov

[10] RFR 8186654 : Poor quality of sun.security.util.Cache.EqualByteArray.hashCode()

2017-08-23 Thread Ivan Gerasimov
-8186654 WEBREV: http://cr.openjdk.java.net/~igerasim/8186654/00/webrev/ -- With kind regards, Ivan Gerasimov

[jdk8u-dev] Review Request and Approval to Backport: 8140436: Support the FFDHE TLS extension

2017-05-19 Thread Ivan Gerasimov
k/rev/87290d66b649 Jdk10 review: http://mail.openjdk.java.net/pipermail/security-dev/2017-April/015790.html Jdk8u webrev: http://cr.openjdk.java.net/~igerasim/8140436/00/webrev/ Thanks in advance! -- With kind regards, Ivan Gerasimov

[8u-dev] RFR 8170278 : ticket renewal won't happen with debugging turned on

2016-11-29 Thread Ivan Gerasimov
Hello! It was reported that there's broken behavior exposed when the debug mode is turned on, which is due to KerberosTicket.toString() throwing an exception, if the ticket was already destroyed. The proposed fix is in fact the backport of a tiny portion of JDK-8043071. BUGURL: https://bugs.

PING : Re: [jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations

2016-10-21 Thread Ivan Gerasimov
Hello! Could someone with the Reviewer's rights please help review and approve this fix? The latest webrev can be found here: http://cr.openjdk.java.net/~igerasim/8165463/01/webrev/ Thanks in advance, Ivan

Re: RFR: 8168468: [TEST_BUG] CheckNullEntity.java fails to compile

2016-10-21 Thread Ivan Gerasimov
Thank you Sean! However, my initial evaluation occurred to be wrong: the failure was due to a different reason, so I reassigned the bug. With kind regards, Ivan On 21.10.2016 14:34, Sean Mullan wrote: Looks good. Add noreg-self label to the bug. --Sean On 10/21/2016 05:37 AM, Ivan

RFR: 8168468: [TEST_BUG] CheckNullEntity.java fails to compile

2016-10-21 Thread Ivan Gerasimov
Hello! A compilation issue with the regression test was observed due to ambiguity between two X509ExtendedTrustManager classes. The fix is to organize the imports. BUGURL: https://bugs.openjdk.java.net/browse/JDK-8168468 WEBREV: http://cr.openjdk.java.net/~igerasim/8168468/00/webrev/ Would y

[8u-dev] Request for Review and Approval to backport: 8167591: Add MD5 to signed JAR restrictions

2016-10-20 Thread Ivan Gerasimov
Hello! Would you please help review and give the approval to backport this fix? The changes in the backport, comparing to the fix in 9, are due to different file structure and the different previous value of the property. Bug: https://bugs.openjdk.java.net/browse/JDK-8167591 Jdk9 change: http

Re: [jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations

2016-09-07 Thread Ivan Gerasimov
From: security-dev [mailto:[email protected]] On Behalf Of Ivan Gerasimov Sent: Dienstag, 6. September 2016 22:07 To: Artem Smotrakov ; security- [email protected] Subject: Re: [jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) fo

Re: [jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations

2016-09-06 Thread Ivan Gerasimov
not found 1415 } ... Thanks! Artem On 09/06/2016 01:07 PM, Ivan Gerasimov wrote: Hi Artem! On 06.09.2016 20:45, Artem Smotrakov wrote: Hi Ivan, It's not really about your changes, but I am wondering if "delete [] pszNameString" should be called before "conti

Re: [jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations

2016-09-06 Thread Ivan Gerasimov
ake the deallocation logic more clear. There seems to be another, more promising memleak in loadKeysOrCertificateChains(), which I'm investigating at the moment. I think these two leaks can be fixed together. With kind regards, Ivan Artem On 09/06/2016 02:54 AM, Ivan Gerasimov wrote:

Re: [jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations

2016-09-06 Thread Ivan Gerasimov
t] On Behalf Of Ivan Gerasimov Sent: Montag, 5. September 2016 21:53 To: [email protected] Subject: [jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations Hello! In the native layer of sunmscapi provider, for memory allocations the

[jdk9] (S) RFR: 8165463: Native implementation of sunmscapi should use operator new (nothrow) for allocations

2016-09-05 Thread Ivan Gerasimov
Hello! In the native layer of sunmscapi provider, for memory allocations the ::operator new() is used. In (a very unlikely) case of failure, it will raise a C++ exception of type bad_alloc, which is bad, as we don't have handling code. One simple way to improve the situation would be to use :

Re: [jdk9] (XXS) RFR: 8165413: A few typos in javadoc

2016-09-03 Thread Ivan Gerasimov
make this mistake anymore? Good point. Let's remove it! With kind regards, Ivan Thanks Max On 9/4/2016 3:30, Ivan Gerasimov wrote: Hello! Just a few minor typos found across the security-lib javadoc. Please help review. BUGURL: https://bugs.openjdk.java.net/browse/JDK-8165413 WE

[jdk9] (XXS) RFR: 8165413: A few typos in javadoc

2016-09-03 Thread Ivan Gerasimov
Hello! Just a few minor typos found across the security-lib javadoc. Please help review. BUGURL: https://bugs.openjdk.java.net/browse/JDK-8165413 WEBREV: http://cr.openjdk.java.net/~igerasim/8165413/00/webrev/ With kind regards, Ivan

[jdk9] (XS) RFR: 6474807: (smartcardio) CardTerminal.connect() throws CardException instead of CardNotPresentException

2016-08-23 Thread Ivan Gerasimov
Hello! When underlying PCSC driver returns the error SCARD_E_NO_SMARTCARD, we should throw a more specialized exception of type CardNotPresentException. Currently, the plain CardException is thrown, which makes some TCK tests unhappy. BUGURL: https://bugs.openjdk.java.net/browse/JDK-6474807

Re: PING - [jdk9] RFR: 8153438: Avoid repeated "Please insert a smart card" popup windows

2016-08-17 Thread Ivan Gerasimov
necessary, so if the context could be acquired silently (i.e. the result is TRUE), it will be possible to acquire it with no UI and without explicit SILENT flag. With kind regards, Ivan Changes look fine. Valerie On 8/16/2016 1:06 PM, Ivan Gerasimov wrote: Thank you Valerie for looking into

Re: PING - [jdk9] RFR: 8153438: Avoid repeated "Please insert a smart card" popup windows

2016-08-16 Thread Ivan Gerasimov
variant, the slowdown isn't noticeable by eye, but it surely will be worthwhile to do some benchmarking. With kind regards, Ivan Thanks. On 16 Aug 2016, at 13:56, Ivan Gerasimov wrote: A gentle reminder. Would you please help review at your convenience. With kind regards, Ivan On 09.08

Re: PING - [jdk9] RFR: 8153438: Avoid repeated "Please insert a smart card" popup windows

2016-08-16 Thread Ivan Gerasimov
, Ivan Anything that I missed? Valerie On 8/16/2016 6:27 AM, Vincent Ryan wrote: That fix looks fine. Is there any significant performance impact due to calling CryptAcquireCertificatePrivateKey twice? Thanks. On 16 Aug 2016, at 13:56, Ivan Gerasimov wrote: A gentle reminder. Would you p

PING - [jdk9] RFR: 8153438: Avoid repeated "Please insert a smart card" popup windows

2016-08-16 Thread Ivan Gerasimov
A gentle reminder. Would you please help review at your convenience. With kind regards, Ivan On 09.08.2016 12:27, Ivan Gerasimov wrote: Hello! In order to reduce the number of popup dialog windows during accessing the smartcard, it is proposed to first do a silent "probe" ste

Re: [jdk9] RFR: 8163896: Finalizing one key of a KeyPair invalidates the other key

2016-08-15 Thread Ivan Gerasimov
Thank you Vincent for review! With kind regards, Ivan On 15.08.2016 19:13, Vincent Ryan wrote: Thanks Ivan. Your fix looks good. On 13 Aug 2016, at 02:15, Ivan Gerasimov wrote: Hello! It was noticed, that SunMSCAPI implementation of a KeyPair has a problem: The public and the private

Re: [jdk9] RFR: 8163896: Finalizing one key of a KeyPair invalidates the other key

2016-08-15 Thread Ivan Gerasimov
ase. Could you make it more generic ? i.e. don't just test the MSCAPI provider. Let's cycle through all providers available for KeyPairGenerator and ensure no other provider suffers (or introduces) the same issue. Regards, Sean. On 13/08/16 02:15, Ivan Gerasimov wrote: Hello!

[jdk9] RFR: 8163896: Finalizing one key of a KeyPair invalidates the other key

2016-08-12 Thread Ivan Gerasimov
Hello! It was noticed, that SunMSCAPI implementation of a KeyPair has a problem: The public and the private keys share the same native handles. As the result, when one of the keys is finalized, and its resources are freed, the second key becomes invalid. Would you please help review the fix

[jdk9] RFR: 8153438: Avoid repeated "Please insert a smart card" popup windows

2016-08-09 Thread Ivan Gerasimov
Hello! In order to reduce the number of popup dialog windows during accessing the smartcard, it is proposed to first do a silent "probe" step. Only if this probe succeeded, or if it failed due to that SILENT flag, we'll try to re-acquire the key normally (i.e. not silently). Would you please

[8u-dev] Request for Review and Approval to backport: 8160518: Semicolon is not recognized as comment starting character (Kerberos)

2016-07-08 Thread Ivan Gerasimov
Hello! I'd like to backport this fix into jdk8u-dev. The fix is essentially the same as in jdk9, but could not be used verbatim because of the code derivation. Bug: https://bugs.openjdk.java.net/browse/JDK-8160518 Jdk9 change: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/4d5c6e8bad2d Jdk9 revie

Re: RFR: 8160518: Semicolon is not recognized as comment starting character (Kerberos)

2016-07-08 Thread Ivan Gerasimov
ards, Ivan Thanks Max On Jul 5, 2016, at 1:03 AM, Ivan Gerasimov wrote: Hello! We've got a complain that a semicolon character cannot be used to start a comment in the kerberos config file. In the documentation [1] I don't see mentioning comments at all, but it is said that the config

RFR: 8160518: Semicolon is not recognized as comment starting character (Kerberos)

2016-07-04 Thread Ivan Gerasimov
Hello! We've got a complain that a semicolon character cannot be used to start a comment in the kerberos config file. In the documentation [1] I don't see mentioning comments at all, but it is said that the config file is in style of Windows INI file, and the later does allow semicolons to be

RFR: 8160267: Ucrypto config file cannot be read when -Dfile.encoding=UTF-16 is set

2016-07-04 Thread Ivan Gerasimov
Hello! When backporting JDK-8158633 to jdk8u, it was noticed that OracleUcrypto provider may experience difficulties reading its config file in UTF-16 environment. The fix is to explicitly specify the expected encoding of the config file. Would you please help review the fix? BUGURL: https:

Re: RFR: 8153948: sun/security/mscapi/ShortRSAKey1024.sh fails with "Field length overflow"

2016-07-03 Thread Ivan Gerasimov
Thank you Seán and Xuelei for your reviews! With kind regards, Ivan On 03.07.2016 15:43, Xuelei Fan wrote: On 7/3/2016 8:37 PM, Seán Coffey wrote: Looks like a good test fix to me Ivan. +1. Xuelei Regards, Sean. On 29/06/2016 16:20, Ivan Gerasimov wrote: Hello! The mentioned test was

Re: RFR: Fix typographical errors in Cipher.java (JDK-8030132 and JDK-8160222)

2016-06-30 Thread Ivan Gerasimov
Looks good! Similar typo is found in another file: java.security.jgss/share/classes/sun/security/jgss/spi/GSSContextSpi.java: * Return the mechanism-specific attribute associated with (@code type}. May be worth fixing it together. With kind regards, Ivan On 30.06.2016 10:39, Jamil Nimeh wro

  1   2   >