Re: Updates to documentation for JEP 287

2016-11-08 Thread Jurrian Fahner
Thanks for the update. Kind regards, Jurrian Op ma 7 nov. 2016 23:45 schreef Sean Mullan : > There's a bug open to update the Standard Names doc to include SHA-3: > https://bugs.openjdk.java.net/browse/JDK-8004078 > > The security guides typically get updated a bit later. I don't have an > esti

Re: RFR 7004967: SecureRandom should be more explicit about threading

2016-11-08 Thread Sean Mullan
On 11/7/16 4:59 AM, Wang Weijun wrote: Accepted. Please review http://ccc.us.oracle.com/8169312. Reviewed. In fact, can we deprecate the getSeed() method? It's not unsafe so we don't need to give it a forRemoval value. Sounds reasonable. I would file a bug, but I don't think it is critical

Re: [9] RFR: 8168882: keytool doesn't print certificate info if disabled algorithm was used for signing a jar

2016-11-08 Thread Sean Mullan
Looks fine to me. --Sean On 11/7/16 10:10 PM, Wang Weijun wrote: Everything looks fine now. --Max On Nov 8, 2016, at 11:09 AM, Artem Smotrakov wrote: Here is final version (I hope) http://cr.openjdk.java.net/~asmotrak/8168882/webrev.04/ Artem

Re: RFR: 8169229: RSAClientKeyExchange debug info is incorrect

2016-11-08 Thread Bradford Wetmore
Xuelei/I inadvertently left off security-dev in a later discussion, so cc'ing here on some main points. On 11/4/2016 4:33 PM, Xuelei Fan wrote: As there is a preMaster, may not need the debug-only debugProtocolVersion class field. It can be extracted from preMaster in the print() implementatio

Re: RFR 7004967: SecureRandom should be more explicit about threading

2016-11-08 Thread Wang Weijun
> On Nov 9, 2016, at 5:06 AM, Sean Mullan wrote: > >> In fact, can we >> deprecate the getSeed() method? It's not unsafe so we don't need to give >> it a forRemoval value. > > Sounds reasonable. I would file a bug, but I don't think it is critical for 9 > - we can do it in 10. https://bugs.op

Re: RFR: 8169229: RSAClientKeyExchange debug info is incorrect

2016-11-08 Thread Xuelei Fan
> http://cr.openjdk.java.net/~wetmore/8169229/webrev.01 Looks fine to me. Xuelei On 11/9/2016 7:09 AM, Bradford Wetmore wrote: Xuelei/I inadvertently left off security-dev in a later discussion, so cc'ing here on some main points. On 11/4/2016 4:33 PM, Xuelei Fan wrote: As there is a preMaste