Re: [security-dev 01750]: Re: alias in KeyPairGenerator - was: '\0' in alias name of a pkcs11 keystore

2010-04-20 Thread Tomas Gustavsson
Hi here are some more detailed testing results. Tested on one of the most common HSMs, a SafeNet Luna SA. If it would be of interest for you I could use pkcs11-spy to log the exact PKCS11 calls that are passed. 1) When simply generating keys without a PKCS11 config file, the key generation

hg: jdk7/tl/jdk: 6944847: native gss lib names on linux

2010-04-20 Thread weijun . wang
Changeset: 97fb6f6d230a Author:weijun Date: 2010-04-20 19:30 +0800 URL: http://hg.openjdk.java.net/jdk7/tl/jdk/rev/97fb6f6d230a 6944847: native gss lib names on linux Reviewed-by: valeriep ! src/share/classes/sun/security/jgss/wrapper/SunNativeProvider.java +

Re: [security-dev 01563]: Subject lines in security-dev.

2010-04-20 Thread Chris Hegarty
Brad, Sorry to chime in late, but would it make server side rules/filtering simpler if we added the mailing list name in the subject line? The reason I ask is that since moving to a new mail server I can no longer create filters on the 'sender' ( or any other more exotic ) headers. This

Re: [security-dev 01750]: Re: alias in KeyPairGenerator - was: '\0' in alias name of a pkcs11 keystore

2010-04-20 Thread Michael StJohns
This is kind of a strange error message. It generally gets issued when a key type and a mechanism don't agree. Moving the key from a session key to a token key basically changes the key from ephemeral to permanent - so not sure what's going on here. I note that you have more than just

Re: Support for TLS 1.1 1.2

2010-04-20 Thread Bradford Wetmore
Christian/Christopher and any others, On 1/7/2010 8:47 AM, Christopher Wood ( Ottawa ) wrote: 1. In a previous email (January 2008) ...referring to Christian's email... http://mail.openjdk.java.net/pipermail/security-dev/2008-January/54.html asked about support for TLS 1.1. The reply