[9] RFR: 8007706: X.509 cert extension SAN should support "_" in dNSName

2014-07-22 Thread Jason Uh
Hi Max, Could you please review this fix? http://cr.openjdk.java.net/~juh/8007706/webrev.00/ With the fix, the rules will be: 1. A DNSName must begin with a letter or a digit 2. After the first character, valid characters in DNSName components are letters, digits, hyphens, and underscores A

Re: [9] RFR: 8007706: X.509 cert extension SAN should support "_" in dNSName

2014-07-22 Thread Florian Weimer
On 07/22/2014 09:52 AM, Jason Uh wrote: Hi Max, Could you please review this fix? http://cr.openjdk.java.net/~juh/8007706/webrev.00/ With the fix, the rules will be: 1. A DNSName must begin with a letter or a digit 2. After the first character, valid characters in DNSName components are letter

RFR: 8042982: Unexpected RuntimeExceptions being thrown by SSLEngine

2014-07-22 Thread Rob McKenna
Hi folks, A simple change to use SSLHandshakeException instead of RuntimeException in getAgreedSecret in DHCrypt and ECDHCrypt. This will prevent these RuntimeExceptions from propagating to the application and allow application programmers to handle them as SSLHandshakeExceptions. http://cr.

Re: [9] RFR 8035166: Remove dependency on EC classes from pkcs11 provider

2014-07-22 Thread Sean Mullan
Looks good. --Sean On 07/21/2014 06:33 PM, Valerie Peng wrote: Done, webrev updated at http://cr.openjdk.java.net/~valeriep/8035166/webrev.01/ Thanks, Valerie On 7/21/2014 11:18 AM, Sean Mullan wrote: Can you also change the following comment in sun/security/ssl/SupportedEllipticCurvesExtensi

RFR: 8044659: Java SecureRandom on SPARC T4 much slower than on x86/Linux

2014-07-22 Thread Rob McKenna
Hi folks, When repeatedly gathering small amounts of random data the SUN provider is quicker ucrypto / pkcs11. This proposed fix from Brad allows ucrypto / pkcs11 leverage the SUN SHA1 provider for SHA1PRNG. This allows us to avoid the overhead of calling into the native level repeatedly for s

RFR: com/sun/org/apache/xml/internal/security/transforms/ClassLoaderTest.java doesn't run in agentvm mode

2014-07-22 Thread Sean Mullan
This is a fix for a test that was on the problem list. The fix is simple, I just changed the test to run in othervm mode, it was failing due to a classloader issue running in agentvm mode. Was able to get a clean jprt run on all systems. http://cr.openjdk.java.net/~mullan/webrevs/7147060/webre

Re: RFR: 8044659: Java SecureRandom on SPARC T4 much slower than on x86/Linux

2014-07-22 Thread Sean Mullan
Looks fine to me. --Sean On 07/22/2014 01:44 PM, Rob McKenna wrote: Hi folks, When repeatedly gathering small amounts of random data the SUN provider is quicker ucrypto / pkcs11. This proposed fix from Brad allows ucrypto / pkcs11 leverage the SUN SHA1 provider for SHA1PRNG. This allows us to

RFR : 8051614 : smartcardio TCK tests fail due to lack of 'reset' permission

2014-07-22 Thread Seán Coffey
A recent fix was introduced to preserve the behaviour of an old buggy implementation of smartcardio Card.disconnect : https://bugs.openjdk.java.net/browse/JDK-8049250 The old behaviour is not fully restored with this flag if a security manager lacking sufficient permissions is present. This cou

Re: RFR : 8051614 : smartcardio TCK tests fail due to lack of 'reset' permission

2014-07-22 Thread Valerie Peng
Well, I see your point. However, I am a little concerned that the security check isn't being performed in the old buggy impl. Is there any customer running into this, e.g. rely on the old behavior with security manager enabled? Valerie On 7/22/2014 2:45 PM, Seán Coffey wrote: A recent fix was

RFR 6997010: Consolidate java.security files into one file with modifications

2014-07-22 Thread Wang Weijun
Please review the code change at http://cr.openjdk.java.net/~weijun/6997010/webrev.00/ The fix consolidates java.security- files into one with #ifdef directives. There are several major changes: 1. Creation of file is moved from CopyFiles to GenerateData, since we are really generating so

Re: JEP Review Request: Improve Security Manager Performance

2014-07-22 Thread David M. Lloyd
On 04/25/2014 09:36 AM, Sean Mullan wrote: Please review a draft of a proposed research JEP to improve the performance of the Security Manager: I have another idea that might be worth looking into. One problem with security manager performance is that many times a class will perform privileg