Re: RFR 8050402: Tests to check for use of policy files

2015-09-24 Thread Amanda Jiang
Hi Sean, Thanks for reviewing this, new comments has been addressed, please check the webrev below: http://cr.openjdk.java.net/~amjiang/8050402/webrev.03/ Thanks, Amanda On 9/24/15, 12:21 PM, Sean Mullan wrote: Hi Amanda, Just a couple more comments. - The @bug tage in ExtensiblePolicyTes

The fix for JDK-806769 breaks some ldap usages.

2015-09-24 Thread David Black
As I do not have an account on https://bugs.openjdk.java.net, yes I have submitted a standard oracle java bug report, I thought it might be of interest to those on this mailing list to forward information on how some java ldap users since the JDK-806769 fix may encounter invalid ldaps hostname issu

Re: RFR 8130648: JCK test api/java_security/AuthProvider/ProviderTests_login starts failing after JDK-7191662

2015-09-24 Thread Valerie Peng
Sure, the webrev is updated below with your comments and Joe's suggestion of adding a query API for provider configuration. I added a trivial regression test for the uninitialized PKCS11 provider as well. Webrev: http://cr.openjdk.java.net/~valeriep/8130648/webrev.01/ Will update CCC once th

Re: TLS ALPN Proposal v5

2015-09-24 Thread Xuelei Fan
On 9/25/2015 7:45 AM, Bradford Wetmore wrote: > > On 9/23/2015 2:33 AM, Simone Bordet wrote: >> Hi, >> >> On Wed, Sep 23, 2015 at 7:04 AM, Bradford Wetmore >> wrote: >>> This new proposal still requires that ciphers are sorted in a way that matches the ApplicationProtocol order. Wo

Re: TLS ALPN Proposal v5

2015-09-24 Thread Simone Bordet
Hi, On Fri, Sep 25, 2015 at 1:45 AM, Bradford Wetmore wrote: > I think that a textual name will be better than: > > // Output: javax.net.ssl.ApplicationProtocol$1@1b9e1916 > > System.out.println(ApplicationProtocol.H2); > > and there's no UTF-8 ambiguity. Sure, but then I would just kee

Re: TLS ALPN Proposal v5

2015-09-24 Thread Bradford Wetmore
On 9/23/2015 2:33 AM, Simone Bordet wrote: Hi, On Wed, Sep 23, 2015 at 7:04 AM, Bradford Wetmore wrote: This new proposal still requires that ciphers are sorted in a way that matches the ApplicationProtocol order. Would be nice if, along with the HTTP/2 blacklist, there is a HTTP/2 comparat

JEP 273: DRBG-Based SecureRandom Implementations

2015-09-24 Thread mark . reinhold
New JEP Candidate: http://openjdk.java.net/jeps/273 - Mark

Re: RFR 8050402: Tests to check for use of policy files

2015-09-24 Thread Sean Mullan
Hi Amanda, Just a couple more comments. - The @bug tage in ExtensiblePolicyTest.java should be on a separate line. - I'm not sure why some of the static methods in TVPermission need to be synchronized. In particular I see no reason for getMask and getActions to be synchronized. --Sean On 9

Re: RFR 8130648: JCK test api/java_security/AuthProvider/ProviderTests_login starts failing after JDK-7191662

2015-09-24 Thread Sean Mullan
Ok, I see now. I think now that it also makes sense to change setCallbackHandler to throw IllegalStateException if a provider that requires configuration has not been configured. This is because the permission depends on the name of the provider, which (at least in the case of PKCS11) may not