Does TLS 1.2 with SunPKCS11-NSS provider work in FIPS mode

Hello Java Security Devs, The following exception occurs while processing serverHelloDone during an attempt at TLS1.2 with NSS in FIPS mode (via modutil) . java.security.NoSuchAlgorithmException: no such algorithm: SunTls12RsaPremasterSecret for provider SunPKCS11-NSS Both the client and

Re: Does TLS 1.2 with SunPKCS11-NSS provider work in FIPS mode

Hi Jenny, As there is no PKCS#11 spec to support the mechanism, it is a known issue to us: https://bugs.openjdk.java.net/browse/JDK-8029661 Need to look into the new development of PKCS11 standards. Regards, Xuelei On 4/1/2015 1:09 AM, Lighthart, Jenny wrote: > Hello Java Security Devs, > >

Re: RFR 8056174: New APIs for jar signing

> On Mar 27, 2015, at 00:26, Mandy Chung wrote: > >> The root repo also needs a little change: >> >> diff --git a/common/bin/unshuffle_list.txt b/common/bin/unshuffle_list.txt > > This is a new package that you don't need to include in the > unshuffle_list.txt (that's mainly for backporting us

Re: custom critical X509v3 extensions

What's the requirements for the customization? If required, alternatively, developer can customize the trust manager instead. Xuelei On 3/24/2015 8:53 PM, Jan Willem Janssen wrote: > Hi, > > When a X509TrustManager validates an endpoint certificate containing a > critical custom extension the s