Re: RFR: 8284490: Remove finalizer method in java.security.jgss

2022-04-07 Thread Peter Firmstone
Looks good to me, removes credentials when phantom reachable, doesn't do anything that would prevent it from becoming reachable.  You removed the GNSSException that wasn't thrown. Regards, Peter. On 7/04/2022 2:17 pm, Xue-Lei Andrew Fan wrote: Please review the update to remove finalizer

Re: RFR: 8284490: Remove finalizer method in java.security.jgss

2022-04-07 Thread Daniel Fuchs
On Thu, 7 Apr 2022 04:10:55 GMT, Xue-Lei Andrew Fan wrote: > Please review the update to remove finalizer method in the java.security.jgss > module. It is one of the efforts to clean up the use of finalizer method in > JDK.

Integrated: 8284415: Collapse identical catch branches in security libs

2022-04-07 Thread Andrey Turbanov
On Fri, 1 Apr 2022 07:32:21 GMT, Andrey Turbanov wrote: > Let's take advantage of Java 7 language feature - "Catching Multiple > Exception Types". > It simplifies code. Reduces duplication. > Found by IntelliJ IDEA inspection `Identical 'catch' branches in 'try' > statement` This pull request

Re: RFR: 8284415: Collapse identical catch branches in security libs [v2]

2022-04-07 Thread Andrey Turbanov
On Thu, 7 Apr 2022 07:52:29 GMT, Andrey Turbanov wrote: >> Let's take advantage of Java 7 language feature - "Catching Multiple >> Exception Types". >> It simplifies code. Reduces duplication. >> Found by IntelliJ IDEA inspection `Identical 'catch' branches in 'try' >> statement` > > Andrey

Re: RFR: 8284415: Collapse identical catch branches in security libs [v2]

2022-04-07 Thread Andrey Turbanov
> Let's take advantage of Java 7 language feature - "Catching Multiple > Exception Types". > It simplifies code. Reduces duplication. > Found by IntelliJ IDEA inspection `Identical 'catch' branches in 'try' > statement` Andrey Turbanov has updated the pull request incrementally with one

Integrated: JDK-8284353 : Update java/net and sun/net/www tests to eliminate dependency on sun.net.www.MessageHeader

2022-04-07 Thread Mahendra Chhipa
On Tue, 5 Apr 2022 10:27:54 GMT, Mahendra Chhipa wrote: > Updated java/net and sun/net/www tests to remove dependency on > sun.net.www.MessageHeader. This pull request has now been integrated. Changeset: ec73c61d Author:Mahendra Chhipa Committer: Daniel Fuchs URL:

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v3]

2022-04-07 Thread Xue-Lei Andrew Fan
> Please review the update to remove finalizer method in the java.security.jgss > module. It is one of the efforts to clean up the use of finalizer method in > JDK. Xue-Lei Andrew Fan has updated the pull request incrementally with one additional commit since the last revision: Update

Re: RFR: 8212136: Remove BaseSSLSocketImpl finalizer method

2022-04-07 Thread Xue-Lei Andrew Fan
On Thu, 31 Mar 2022 20:15:35 GMT, Xue-Lei Andrew Fan wrote: > Please review the update to remove finalizer method in the SunJSSE provider > implementation. It is one of the efforts to clean up the use of finalizer > method in JDK. Need an update, close the review for now. - PR:

Withdrawn: 8212136: Remove BaseSSLSocketImpl finalizer method

2022-04-07 Thread Xue-Lei Andrew Fan
On Thu, 31 Mar 2022 20:15:35 GMT, Xue-Lei Andrew Fan wrote: > Please review the update to remove finalizer method in the SunJSSE provider > implementation. It is one of the efforts to clean up the use of finalizer > method in JDK. This pull request has been closed without being integrated.

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v2]

2022-04-07 Thread Xue-Lei Andrew Fan
> Please review the update to remove finalizer method in the java.security.jgss > module. It is one of the efforts to clean up the use of finalizer method in > JDK. Xue-Lei Andrew Fan has updated the pull request incrementally with one additional commit since the last revision: the object

Re: A possible JEP to replace SecurityManager after JEP 411

2022-04-07 Thread Bernd Eckenfels
Hello, I think this proposal be very powerful, it allows completely new models (like custom sandboxed VMs) while still removing many of the complicated classes. I am all for it, but it does limit the actual work saved since the doPriveleged and checkPermission sites are the thing which is the

Re: RFR: 8212136: Remove BaseSSLSocketImpl finalizer method

2022-04-07 Thread Xue-Lei Andrew Fan
On Thu, 31 Mar 2022 20:15:35 GMT, Xue-Lei Andrew Fan wrote: > Please review the update to remove finalizer method in the SunJSSE provider > implementation. It is one of the efforts to clean up the use of finalizer > method in JDK. The socket close() call in the finalize() method may be

Re: RFR: 8212136: Remove BaseSSLSocketImpl finalizer method [v2]

2022-04-07 Thread Xue-Lei Andrew Fan
> Please review the update to remove finalizer method in the SunJSSE provider > implementation. It is one of the efforts to clean up the use of finalizer > method in JDK. Xue-Lei Andrew Fan has updated the pull request incrementally with two additional commits since the last revision: -

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v2]

2022-04-07 Thread Valerie Peng
On Thu, 7 Apr 2022 15:48:50 GMT, Xue-Lei Andrew Fan wrote: >> src/java.security.jgss/share/classes/sun/security/jgss/wrapper/GSSCredElement.java >> line 74: >> >>> 72: name = srcName; >>> 73: >>> 74: Cleaner.create().register(this, this::dispose); >> >> This will create a

Re: A possible JEP to replace SecurityManager after JEP 411

2022-04-07 Thread Sean Mullan
Hi David, Thanks for the feedback and spending some time on this proposal. Some specific comments below. On 4/5/22 9:52 AM, David Lloyd wrote: Here at Red Hat there have been serious discussions about the impacts of security manager removal on our users, and whether there is an actual value

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v3]

2022-04-07 Thread Weijun Wang
On Thu, 7 Apr 2022 17:54:35 GMT, Xue-Lei Andrew Fan wrote: >> Hmm, the earlier JCE change would also needs to be updated as it calls a >> cleanup method on the to-be-cleaned object. > >> Hmm, the earlier JCE change would also needs to be updated as it calls a >> cleanup method on the

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v3]

2022-04-07 Thread Roger Riggs
On Thu, 7 Apr 2022 19:21:31 GMT, Xue-Lei Andrew Fan wrote: >> Please review the update to remove finalizer method in the >> java.security.jgss module. It is one of the efforts to clean up the use of >> finalizer method in JDK. > > Xue-Lei Andrew Fan has updated the pull request incrementally

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v2]

2022-04-07 Thread Xue-Lei Andrew Fan
On Thu, 7 Apr 2022 17:35:47 GMT, Valerie Peng wrote: > Hmm, the earlier JCE change would also needs to be updated as it calls a > cleanup method on the to-be-cleaned object. Yes, I will check the cleaner used in the security components and make sure there is object reference problems.

Re: RFR: JDK-8234128 jarsigner will not show not-signed-by-alias warning if an intermediate cert is in this keystore

2022-04-07 Thread Jamil Nimeh
On Tue, 8 Mar 2022 23:22:56 GMT, Mark Powers wrote: > https://bugs.openjdk.java.net/browse/JDK-8234128 > > My initial attempt had too many bad side-effects. This latest fix only tries > to suppress the warning message. test/jdk/sun/security/tools/jarsigner/warnings/AliasNotInStoreTest2.java

Re: RFR: JDK-8234128 jarsigner will not show not-signed-by-alias warning if an intermediate cert is in this keystore

2022-04-07 Thread Jamil Nimeh
On Tue, 8 Mar 2022 23:22:56 GMT, Mark Powers wrote: > https://bugs.openjdk.java.net/browse/JDK-8234128 > > My initial attempt had too many bad side-effects. This latest fix only tries > to suppress the warning message. Looks good to me. Yeah, the loop seems like it would behave the same way

Re: RFR: 8284490: Remove finalizer method in java.security.jgss

2022-04-07 Thread Roger Riggs
On Thu, 7 Apr 2022 10:51:13 GMT, Daniel Fuchs wrote: >> Please review the update to remove finalizer method in the >> java.security.jgss module. It is one of the efforts to clean up the use of >> finalizer method in JDK. > >

Re: RFR: 8284490: Remove finalizer method in java.security.jgss

2022-04-07 Thread Xue-Lei Andrew Fan
On Thu, 7 Apr 2022 10:51:13 GMT, Daniel Fuchs wrote: >> Please review the update to remove finalizer method in the >> java.security.jgss module. It is one of the efforts to clean up the use of >> finalizer method in JDK. > >

Re: RFR: JDK-8234128 jarsigner will not show not-signed-by-alias warning if an intermediate cert is in this keystore

2022-04-07 Thread Mark Powers
On Tue, 8 Mar 2022 23:22:56 GMT, Mark Powers wrote: > https://bugs.openjdk.java.net/browse/JDK-8234128 > > My initial attempt had too many bad side-effects. This latest fix only tries > to suppress the warning message. I recall that Max said the intermediate was not necessary. Maybe he can

Integrated: JDK-8234128 jarsigner will not show not-signed-by-alias warning if an intermediate cert is in this keystore

2022-04-07 Thread Mark Powers
On Tue, 8 Mar 2022 23:22:56 GMT, Mark Powers wrote: > https://bugs.openjdk.java.net/browse/JDK-8234128 > > My initial attempt had too many bad side-effects. This latest fix only tries > to suppress the warning message. This pull request has now been integrated. Changeset: d6f01e9d Author:

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v3]

2022-04-07 Thread Weijun Wang
On Thu, 7 Apr 2022 19:21:31 GMT, Xue-Lei Andrew Fan wrote: >> Please review the update to remove finalizer method in the >> java.security.jgss module. It is one of the efforts to clean up the use of >> finalizer method in JDK. > > Xue-Lei Andrew Fan has updated the pull request incrementally

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v3]

2022-04-07 Thread Weijun Wang
On Thu, 7 Apr 2022 19:21:31 GMT, Xue-Lei Andrew Fan wrote: >> Please review the update to remove finalizer method in the >> java.security.jgss module. It is one of the efforts to clean up the use of >> finalizer method in JDK. > > Xue-Lei Andrew Fan has updated the pull request incrementally

Re: RFR: 8212136: Remove BaseSSLSocketImpl finalizer method

2022-04-07 Thread Xue-Lei Andrew Fan
On Thu, 7 Apr 2022 22:49:24 GMT, Bradford Wetmore wrote: > > The socket close() call in the finalize() method may be blocked for the SSL > > implementation, which is not good for garbage collection. It should be safe > > by just removing the finalize() method. `> > Can you provide more

Re: A possible JEP to replace SecurityManager after JEP 411

2022-04-07 Thread Peter Firmstone
Hi Sean, In order to keep our code up to date with Java, we need to replace access control functionality.   Current advise is that we will need to instrument the Java API, once finalizers have been removed. The sticking point is about the retention of permission checks, which haven't been

Re: RFR: 8284490: Remove finalizer method in java.security.jgss [v3]

2022-04-07 Thread Xue-Lei Andrew Fan
On Thu, 7 Apr 2022 20:00:00 GMT, Weijun Wang wrote: > I'm not sure if it's possible to write a test on the cleanup, but at least we > can temporarily add a `println` line there and see if it ever gets called. I did not find a way to test cleanup yet. Yes, a temporary 'println" is what I can

Re: RFR: 8212136: Remove BaseSSLSocketImpl finalizer method [v2]

2022-04-07 Thread Bradford Wetmore
On Thu, 7 Apr 2022 20:17:28 GMT, Xue-Lei Andrew Fan wrote: >> Please review the update to remove finalizer method in the SunJSSE provider >> implementation. It is one of the efforts to clean up the use of finalizer >> method in JDK. > > Xue-Lei Andrew Fan has updated the pull request

Re: RFR: 8212136: Remove BaseSSLSocketImpl finalizer method

2022-04-07 Thread Bradford Wetmore
On Thu, 7 Apr 2022 20:11:25 GMT, Xue-Lei Andrew Fan wrote: > The socket close() call in the finalize() method may be blocked for the SSL > implementation, which is not good for garbage collection. It should be safe > by just removing the finalize() method. Can you provide more detail? I