Re: Query - Does JSSE library implement the Ciphers or Algorithms of a SSL protocol ?

2016-06-01 Thread Bradford Wetmore
Hopefully this makes it clear. For JSSE, javax.net/javax.net.ssl (in rt.jar) contains the APIs which call into JSSE providers. sun.security.ssl (contained in jsse.jar) is one such provider. The JSSE implementation contains routines specific to TLS, but eventually calls into JCA/JCE for

Re: Query - Does JSSE library implement the Ciphers or Algorithms of a SSL protocol ?

2016-06-01 Thread Ayaskant Swain
Thank you Sean. :-) I will try it out. Ayas On Wed, Jun 1, 2016 at 1:50 PM, Seán Coffey wrote: > The JDK pulls crypto operations from different providers to complete > operations (like TLS handshakes). The jsse.jar file is primarily tasked > with handling TLS

Re: Query - Does JSSE library implement the Ciphers or Algorithms of a SSL protocol ?

2016-06-01 Thread Ayaskant Swain
Hi All, My question was not specific to those two cipher suites that I had pasted in my query. I had just pasted them as examples. Rather my question was generic. I want to know which library or packages in JDK implement the Algorithms/Ciphers that are used for SSL communication? If java

Re: RFR: 8154009: Some methods of java.security.Security require more permissions, than necessary

2016-06-01 Thread Artem Kosarev
Hi Sean. Thanks for suggestion. New WebRev: http://cr.openjdk.java.net/~akosarev/8154009/webrev.01/ There are only 2 changes from original one: 1) *test/java/security/Security/EmptyPolicy.policy* was updated in the way you proposed. 2) I removed 2 tests from *test/ProblemList.txt*, which were

Re: RFR: 8154009: Some methods of java.security.Security require more permissions, than necessary

2016-06-01 Thread Sean Mullan
I think it would be helpful to add a comment to EmptyPolicy.policy so it contains something, ex: // empty policy file for testing Otherwise, looks fine. --Sean On 05/30/2016 09:03 AM, Artem Kosarev wrote: Hello. Could you please review the proposed fix issue which is NOT applicable for JDK

Re: Query - Does JSSE library implement the Ciphers or Algorithms of a SSL protocol ?

2016-06-01 Thread Seán Coffey
The JDK pulls crypto operations from different providers to complete operations (like TLS handshakes). The jsse.jar file is primarily tasked with handling TLS operations but will call into other providers (jars) where necessary. That's all controlled by the security provider framework. If

Re: Query - Does JSSE library implement the Ciphers or Algorithms of a SSL protocol ?

2016-06-01 Thread Seán Coffey
On 01/06/2016 03:42, Jim Manico wrote: I think this is the right answer. From https://stackoverflow.com/questions/27323858/java-6-ecdhe-cipher-suite-support The SSL/TLS implementation "JSSE" in Java 1.6 and later supports ECDHE suites*IF there is an available (JCE) provider*for needed ECC