Hi Tomas, As Andrew said, I've been working on some SunPKCS11 improvements related to native memory leaking. You can find details of this work here [1]. Feedback is always welcomed.
What do you mean with "more flexibility"? -- [1] - http://mail.openjdk.java.net/pipermail/security-dev/2017-October/016400.html On Wed, Jan 24, 2018 at 8:06 AM, Andrew Haley <a...@redhat.com> wrote: > On 24/01/18 10:39, Tomas Gustavsson wrote: > > Imho the P11 layer always needs attention. To work properly we're > > relying on some patches, where parts was recently merged into OpenJDK. > > We just started testing the Amazon CloudHSM, and that requires changes > > to SunPKCS11 as well to work. Not always bad in SunPKCS11 as some P11 > > libraries out there do strange non-conforming stuff, but there's room > > for more flexibility nevertheless. > > Martin Balao has been heavily reworking this layer because it leaks > native memory. I'll let him fill you in on the details. > > -- > Andrew Haley > Java Platform Lead Engineer > Red Hat UK Ltd. <https://www.redhat.com> > EAC8 43EB D3EF DB98 CC77 2FAD A5CD 6035 332F A671 >
