Re: RFR: 8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java makes not reliable time assumption [v2]

2021-05-05 Thread Fernando Guallini
On Tue, 4 May 2021 16:07:42 GMT, Daniel Fuchs wrote: >> Fernando Guallini has updated the pull request incrementally with one >> additional commit since the last revision: >> >> var volatile > > test/jdk/sun/security/ssl/SSLSocketImpl/CloseSocket.java line 45: > >> 43: public class CloseSock

Re: RFR: 8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java makes not reliable time assumption [v2]

2021-05-05 Thread Fernando Guallini
> test sun/security/ssl/SSLSocketImpl/CloseSocket.java verifies the behavior > when a server closes the socket connection during a handshake. The server was > waiting a fixed 100ms before closing it, but there was no guarantee that the > client started the handshake before or during that time fr

RFR: 8180568: Refactor javax/crypto shell tests to plain java tests

2021-05-05 Thread Sibabrata Sahoo
This change is to remove the shell Test and convert to it's java equivalent. That is the reason the shell Tests are deleted and the equivalent Java implementation provided. The purpose of the Test TestExemption.java is with limited crypto policy a JCE provider can supplemented additional crypto

Re: RFR: 8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java makes not reliable time assumption [v2]

2021-05-05 Thread Daniel Fuchs
On Wed, 5 May 2021 10:08:15 GMT, Fernando Guallini wrote: >> test sun/security/ssl/SSLSocketImpl/CloseSocket.java verifies the behavior >> when a server closes the socket connection during a handshake. The server >> was waiting a fixed 100ms before closing it, but there was no guarantee that

Re: RFR: 8164804: sun/security/ssl/SSLSocketImpl/CloseSocket.java makes not reliable time assumption [v2]

2021-05-05 Thread Daniel Fuchs
On Wed, 5 May 2021 10:05:14 GMT, Fernando Guallini wrote: >> test/jdk/sun/security/ssl/SSLSocketImpl/CloseSocket.java line 45: >> >>> 43: public class CloseSocket extends SSLSocketTemplate { >>> 44: >>> 45: private static Thread clientThread = null; >> >> Shouldn't this variable be `volat

Re: JEP411: Missing use-case: Monitoring / restricting libraries

2021-05-05 Thread Peter Firmstone
On 5/05/2021 10:08 am, Ron Pressler wrote: I wouldn’t say Java (or anything else, for that matter) is “able" to do it now, except in the sense that people (scientists) are able (in a billion-dollar particle accelerator) to transmute lead into gold (a few atoms). We’ve had twenty five years to

Re: JEP411: Missing use-case: Monitoring / restricting libraries

2021-05-05 Thread Sean Mullan
-bcc jdk-dev -cc security-dev On 5/5/21 12:04 AM, Peter Firmstone wrote: I think we are talking past each other here.   You keep talking about untrusted code, which sounds like applets to me.  I've read and still have a copy of Li Gong's book, applets were only one of the considerations.  I

Re: [External] : Re: JEP411: Missing use-case: Monitoring / restricting libraries

2021-05-05 Thread Ron Pressler
> On 5 May 2021, at 05:04, Peter Firmstone wrote: > > A VALUABLE LESSON FOR ANY JAVA DEVELOPER: DON'T PUBLISH ANY java.* package > namespace API'S THAT MAY BE AT RISK OF LATER REMOVAL IN YOUR API, java.* > API's ONCE REMOVED CANNOT BE REPLACED. IF YOU ARE CONCERNED SOMETHING MAY BE > REMOV

Re: [External] : Re: JEP411: Missing use-case: Monitoring / restricting libraries

2021-05-05 Thread Peter Tribble
On Wed, May 5, 2021 at 2:13 PM Ron Pressler wrote: > > > > On 5 May 2021, at 05:04, Peter Firmstone > wrote: > > > > A VALUABLE LESSON FOR ANY JAVA DEVELOPER: DON'T PUBLISH ANY java.* > package namespace API'S THAT MAY BE AT RISK OF LATER REMOVAL IN YOUR API, > java.* API's ONCE REMOVED CANNOT B

Re: RFR: 8266293: Key protection using PBEWithMD5AndDES fails with "java.security.InvalidAlgorithmParameterException: Salt must be 8 bytes long"

2021-05-05 Thread Valerie Peng
On Fri, 30 Apr 2021 17:35:46 GMT, Weijun Wang wrote: > `PKCS12KeyStore` always uses a 20-byte salt in encryption but > PBEWithMD5AndDES only accepts 8-byte salt. With this code change, the salt > used for this algorithm will be 8 bytes. > > RFC 2898 only requires the salt to be at least 8 byte

Re: JEP411: Missing use-case: Monitoring / restricting libraries

2021-05-05 Thread Peter Firmstone
On 5/05/2021 10:55 pm, Sean Mullan wrote: -bcc jdk-dev -cc security-dev On 5/5/21 12:04 AM, Peter Firmstone wrote: I think we are talking past each other here.   You keep talking about untrusted code, which sounds like applets to me.  I've read and still have a copy of Li Gong's book, apple

Re: RFR: 8180568: Refactor javax/crypto shell tests to plain java tests

2021-05-05 Thread Bradford Wetmore
On Wed, 5 May 2021 10:00:22 GMT, Sibabrata Sahoo wrote: > This change is to remove the shell Test and convert to it's java equivalent. > That is the reason the shell Tests are deleted and the equivalent Java > implementation provided. > The purpose of the Test TestExemption.java is with limited

Re: Java Bug : Mutual HTTPS authentication not possible with a non-extractable private key with Apple/KeychainStore

2021-05-05 Thread Wei-Jun Wang
> On May 3, 2021, at 1:16 PM, Jean-Yves Cronier wrote: > > Following the advice of Wei-Jun Wang, I share/forward to this mailing-list, > details of a problem that I encounter on MacOS. > > At the moment, I don't know how to modify the existing code so that the Apple > Provider can behave lik

Re: RFR: 8266293: Key protection using PBEWithMD5AndDES fails with "java.security.InvalidAlgorithmParameterException: Salt must be 8 bytes long"

2021-05-05 Thread Valerie Peng
On Fri, 30 Apr 2021 17:35:46 GMT, Weijun Wang wrote: > `PKCS12KeyStore` always uses a 20-byte salt in encryption but > PBEWithMD5AndDES only accepts 8-byte salt. With this code change, the salt > used for this algorithm will be 8 bytes. > > RFC 2898 only requires the salt to be at least 8 byte

Integrated: 8180568: Refactor javax/crypto shell tests to plain java tests

2021-05-05 Thread Sibabrata Sahoo
On Wed, 5 May 2021 10:00:22 GMT, Sibabrata Sahoo wrote: > This change is to remove the shell Test and convert to it's java equivalent. > That is the reason the shell Tests are deleted and the equivalent Java > implementation provided. > The purpose of the Test TestExemption.java is with limited