Re: 8165103: Update to "denyAfter constraint check" exception message

2016-10-05 Thread Anthony Scarpino
This is intentional as an optimization. Setting the String is only needed in the failure case, so I separated them to optimize the success case. That's why I have the comment there. Tony On 10/05/2016 04:58 PM, Valerie Peng wrote: Instead of duplicating the if-check block, how about just ad

Re: 8165103: Update to "denyAfter constraint check" exception message

2016-10-05 Thread Valerie Peng
Instead of duplicating the if-check block, how about just add another String variable "dateType" and assign value to it in the first if-check block? Rest looks fine. Valerie On 10/5/2016 1:20 PM, Anthony Scarpino wrote: Hi, I'd like a review of this change away from a generic error messages

8165103: Update to "denyAfter constraint check" exception message

2016-10-05 Thread Anthony Scarpino
Hi, I'd like a review of this change away from a generic error messages in the denyAfter constraint. The message better specify which date was checked against the constraint now. Testing is handled elsewhere. http://cr.openjdk.java.net/~ascarpino/8165103/webrev/ Tony

RFR: 8165101 AnchorCertificates throws NPE when cacerts file not found

2016-10-05 Thread Anthony Scarpino
Hi, I'd like a review of this simple fix. There's no test as the fix is trivial and it's not practical to test a non-existent cacerts file in a concurrent testing environment http://cr.openjdk.java.net/~ascarpino/8165101/webrev/ Tony

Re: Java 9 - Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files

2016-10-05 Thread Bradford Wetmore
> The bane of my existance for the last decade Us too. > See README.txt for details. Better still, see: http://hg.openjdk.java.net/jdk9/dev/jdk/file/f82971b324f6/src/java.base/share/conf/security/java.security Lines 807-855 crypto.policydir-tbd defaults to "limited" in an OracleJDK build.

Re: RFR:8166632: Document how to grant permissions for a module jrt:/ in the image

2016-10-05 Thread Mandy Chung
> On Oct 5, 2016, at 8:18 AM, Sean Mullan wrote: > > On 10/05/2016 10:58 AM, Alan Bateman wrote: >> >> >> On 05/10/2016 15:57, Sean Mullan wrote: >>> The "jrt" URL scheme syntax is new and not widely known yet, so an >>> example has been added to the conf/security/java.policy file to help >>>

Re: RFR:8166632: Document how to grant permissions for a module jrt:/ in the image

2016-10-05 Thread Sean Mullan
On 10/05/2016 10:58 AM, Alan Bateman wrote: On 05/10/2016 15:57, Sean Mullan wrote: The "jrt" URL scheme syntax is new and not widely known yet, so an example has been added to the conf/security/java.policy file to help users show how to grant permissions to a module: http://cr.openjdk.java.n

Re: RFR:8166632: Document how to grant permissions for a module jrt:/ in the image

2016-10-05 Thread Alan Bateman
On 05/10/2016 15:57, Sean Mullan wrote: The "jrt" URL scheme syntax is new and not widely known yet, so an example has been added to the conf/security/java.policy file to help users show how to grant permissions to a module: http://cr.openjdk.java.net/~mullan/webrevs/8166632/webrev.00/ It mi

RFR:8166632: Document how to grant permissions for a module jrt:/ in the image

2016-10-05 Thread Sean Mullan
The "jrt" URL scheme syntax is new and not widely known yet, so an example has been added to the conf/security/java.policy file to help users show how to grant permissions to a module: http://cr.openjdk.java.net/~mullan/webrevs/8166632/webrev.00/ Thanks, Sean

Re: Java 9 - Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files

2016-10-05 Thread Vincent Ryan
JDK-8061842 has added improvements in JDK 9 to simplify the management of crypto strength. See README.txt for details. Adding, 'Secu

Java 9 - Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files

2016-10-05 Thread Jeroen Cranendonk
Hi! The bane of my existance for the last decade or so has been dealing with errors because the Java Unlimited Strength Jurisdiction Policy Files have not been installed, and finding ways of getting them installed. I was wondering what the state of this is for Java 9? I can't find any Java 9 pol