> On Jun 9, 2016, at 4:22 PM, Valerie Peng <valerie.p...@oracle.com> wrote:
> 
> 
> Thanks for the comments. I will update the reg test, i.e. 
> test/java/security/Provider/DefaultProviderList.java, to check that they are 
> from java.base.
> 

To clarify: what I mean is that you should remove the logic that skips the 
built-in security provider if found.  Also for the security provider, it should 
check it comes from a module other than java.base.

> I don't see a need for built-in security providers to be found through 
> ServiceLoader.load(Provider.class) though. The expected API usage is to get 
> the provider instance through Security.getProvider(String provName).

Right that’s implementation details.  I have no issue with that.

Mandy

> Regards,
> Valerie
> 
> On 6/9/2016 3:31 PM, Mandy Chung wrote:
>>> On Jun 9, 2016, at 3:22 PM, Valerie Peng<valerie.p...@oracle.com>  wrote:
>>> 
>>> 
>>> Anyone can help reviewing this one-line change which removes a redundant 
>>> declaration?
>>> 
>>> As Apple provider is instantiated directly (see 
>>> sun.security.jca.ProviderConfig.java) and not loaded through ServiceLoader 
>>> , we can safely remove the line for ServiceLoader lookup. No new regression 
>>> test as this is just a minor performance fix.
>>> 
>>> Webrev: http://cr.openjdk.java.net/~valeriep/8157489/
>> So all builtin security providers in java.base will not be found from 
>> ServiceLoader.load(Provider.class).
>> 
>> test/java/security/Provider/DefaultProviderList.java should then be updated 
>> to expect all providers are not from java.base and check Class::getModule(). 
>>  Currently the test simply skips some builtin security providers.
>> 
>> Mandy
>> 

Reply via email to