Re: RFR: 8270797: ShortECDSA.java test is not complete

2021-08-04 Thread Sean Mullan
On Thu, 15 Jul 2021 22:38:24 GMT, Weijun Wang wrote: > Add code to call XML signing using internal APIs. The implementation was also > fixed back in JDK-8259535 but not covered by the new test there. Marked as reviewed by mullan (Reviewer). - PR: https://git.openjdk.java.net/jdk/

Integrated: 8270797: ShortECDSA.java test is not complete

2021-08-04 Thread Weijun Wang
On Thu, 15 Jul 2021 22:38:24 GMT, Weijun Wang wrote: > Add code to call XML signing using internal APIs. The implementation was also > fixed back in JDK-8259535 but not covered by the new test there. This pull request has now been integrated. Changeset: 221e4b9c Author:Weijun Wang URL:

RFR: 8271560: sun/security/ssl/DHKeyExchange/LegacyDHEKeyExchange.java still fails due to "An established connection was aborted by the software in your host machine"

2021-08-04 Thread Fernando Guallini
The following test has been seen to fail intermittently on Windows platform: sun/security/ssl/DHKeyExchange/LegacyDHEKeyExchange.java with the exception: java.net.SocketException: An established connection was aborted by the software in your host machine The test seems to be suffering from some

Re: RFR: 8271560: sun/security/ssl/DHKeyExchange/LegacyDHEKeyExchange.java still fails due to "An established connection was aborted by the software in your host machine" [v2]

2021-08-04 Thread Fernando Guallini
> The following test has been seen to fail intermittently on Windows platform: > sun/security/ssl/DHKeyExchange/LegacyDHEKeyExchange.java > with the exception: > java.net.SocketException: An established connection was aborted by the > software in your host machine > > The test seems to be suffer

Re: JEP 411, removal of finalizers, a path forward.

2021-08-04 Thread Chapman Flack
On 08/03/21 12:40, Sean Mullan wrote: > It is to the point where I only skim your emails > quickly. I would take the time to write up your ideas in an external place. > It may not go anywhere, but at least you would have a single place where > your proposal, experiments, etc are documented. I wou

Re: JEP 411, removal of finalizers, a path forward.

2021-08-04 Thread mark . reinhold
2021/8/3 9:40:58 -0700, sean.mul...@oracle.com: > On 8/2/21 8:28 PM, Peter Firmstone wrote: >> ... >> >> Having established that OpenJDK is not yet willing to compromise, I have >> been attempting to create an authorization layer using Agents, so that I >> can restore perimeter security following

Re: [External] : Re: JEP 411, removal of finalizers, a path forward.

2021-08-04 Thread Ron Pressler
> On 4 Aug 2021, at 01:19, Peter Firmstone wrote: > > Excellent, Ron, that's exactly what I'm after. > > I need to be able to implement an authorization layer on top of the JDK, but > reach down into the JDK to use authorization to control access. > > Can we find out how many such checks tha

Re: RFR: 8271566: DSA signature length value is not accurate in P11Signature

2021-08-04 Thread Valerie Peng
On Mon, 2 Aug 2021 19:31:54 GMT, Martin Balao wrote: > As described in JDK-8271566 [1], this patch proposal is intended to fix a > problem that arises when using DSA keys that have a 256-bits (or larger) G > parameter for signatures (either signing or verifying). There were some > incorrect as

Re: JEP 411, removal of finalizers, a path forward.

2021-08-04 Thread Sean Mullan
On 8/3/21 8:10 PM, Peter Firmstone wrote: On 4/08/2021 2:40 am, Sean Mullan wrote: On 8/2/21 8:28 PM, Peter Firmstone wrote: In JGDMS without SM, at least the following must be addressed to maintain security:   1. TLS and Kerberos connections cannot be established.  (My software is

Re: RFR: 8271566: DSA signature length value is not accurate in P11Signature

2021-08-04 Thread Valerie Peng
On Mon, 2 Aug 2021 19:31:54 GMT, Martin Balao wrote: > As described in JDK-8271566 [1], this patch proposal is intended to fix a > problem that arises when using DSA keys that have a 256-bits (or larger) G > parameter for signatures (either signing or verifying). There were some > incorrect as

Withdrawn: 8209092: Remove outdated wording from RC5ParameterSpec

2021-08-04 Thread duke
On Wed, 9 Jun 2021 20:19:12 GMT, Jack Hartstein wrote: > The RC5ParameterSpec class description contains the following sentence: "This > class can be used to initialize a Cipher object that implements the RC5 > algorithm as supplied by RSA Security LLC, or any parties authorized by RSA > Secu