Xuelei, Do you have time to review the following two fixes? 7196382: PKCS11 provider should support 2048-bit DH8010134: A finalizer in sun.security.pkcs11.wrapper.PKCS11 perhaps should be protected
The first one removes the hardcoded limit of 1024 for DH and the second one is making the finalize() method protected.
Webrevs: http://cr.openjdk.java.net/~valeriep/7196382/webrev.00/ http://cr.openjdk.java.net/~valeriep/8010134/webrev.00/ Thanks! Valerie