Re: Review Request of JDK Enhancement Proposal: DTLS

2014-03-19 Thread Xuelei Fan
PMTU is a key point of the design. I was wondering to expose this application layer as a configurable parameter. If it is too big (or not configured), DTLSEngine(let call it temporarily) will downgrade the size automatically, just as the previous messages get lost. It's good point that need a se

Re: Review Request of JDK Enhancement Proposal: DTLS

2014-03-19 Thread Matthew Hall
Xuelei, Is there an existing method for determining valid PMTU from inside of Java? If not then supplying correct segment size to whatever DTLSEngine (or however it's named) class would be non-trivial and could require native code. If there is not such support, then a separate spec would be nee

Review Request of JDK Enhancement Proposal: DTLS

2014-03-19 Thread Xuelei Fan
Hi, Please review the JDK Enhancement Proposal, Support Datagram Transport Layer Security (DTLS) version 1.0 (RFC 4347) and 1.2 (RFC 6347) in the JSSE API and the SunJSSE security provider. Detailed, please refer to the draft JEP: http://cr.openjdk.java.net/~xuelei/7093601/jep-dtls-v00.txt Feel

Review Request of JDK Enhancement Proposal: OCSP stapling

2014-03-19 Thread Xuelei Fan
Hi All, Please review the JDK Enhancement Proposal, support OCSP stapling in SunJSSE security provider. Detailed, please refer to the draft JEP: http://cr.openjdk.java.net/~xuelei/8034248/jep-csre.txt Feel free to make comment and send your feedback to the alias. Thanks, Xuelei

Re: Can you give some suggestion about how build a Hacked JDK for The Malformed Certificates tests

2014-03-19 Thread Matthew Hall
On Wed, Mar 19, 2014 at 07:55:30PM +0800, zaiyao liu wrote: > I am developing The Malformed Certificates tests, this test exist > to test JDK's SSL ability to withstand attack in the form of > deliberately 1.3 million malformed ASN.1-encoded data. > Detail please refer test plan: > http://wiki.s

RFR 8037258: AIOB while parsing CRL for revoked certificate

2014-03-19 Thread Rajan Halade
Please review this small fix - http://cr.openjdk.java.net/~mullan/webrevs/8037258/webrev.02/ I have also updated the source to remove unused variables and updated javadoc information. Thanks, Rajan

Can you give some suggestion about how build a Hacked JDK for The Malformed Certificates tests

2014-03-19 Thread zaiyao liu
Hi team, I am developing The Malformed Certificates tests, this test exist to test JDK's SSL ability to withstand attack in the form of deliberately 1.3 million malformed ASN.1-encoded data. Detail please refer test plan: http://wiki.se.oracle.com/display/JPG/Malformed+Certificates+Test+Plan