Re: [14] RFR JDK-8229243 "SunPKCS11-Solaris provider tests failing on Solaris 11.4"

2019-09-24 Thread Valerie Peng
Great, thanks for the review and feedback~ Valerie On 9/24/2019 9:20 PM, Xuelei Fan wrote: I looked at the latest webrev:   http://cr.openjdk.java.net/~valeriep/8229243/webrev.01/ Which is good to me. Thanks, Xuelei On 9/19/2019 5:46 PM, Valerie Peng wrote: I am not on the PKCS#11

Re: RFR (XS) JDK-8231387 "java.security.Provider.getService returns random result due to race condition with mutating methods in the same class"

2019-09-24 Thread Valerie Peng
Great, the update looks good. Thanks, Valerie On 9/24/2019 5:49 PM, Hohensee, Paul wrote: Thank you, Valerie. :) The patch needs a test, however, so I added a slightly modified version of Tianmin’s reproducer. New webrev at http://cr.openjdk.java.net/~phh/8231387/webrev.01/ The test fails

Re: [14] RFR JDK-8229243 "SunPKCS11-Solaris provider tests failing on Solaris 11.4"

2019-09-24 Thread Xuelei Fan
I looked at the latest webrev: http://cr.openjdk.java.net/~valeriep/8229243/webrev.01/ Which is good to me. Thanks, Xuelei On 9/19/2019 5:46 PM, Valerie Peng wrote: I am not on the PKCS#11 committee and not sure about the plan. As for which one is right, I am more inclined to the "spec is

Re: RFR: 8231351: Add notes for PKCS11 tests in the test doc

2019-09-24 Thread Jia Huang
Thanks Erik. 在 2019年09月24日 23:19, Erik Joelsson 写道: Sure, will do. /Erik

Re: RFR (XS) JDK-8231387 "java.security.Provider.getService returns random result due to race condition with mutating methods in the same class"

2019-09-24 Thread Hohensee, Paul
Thank you, Valerie. :) The patch needs a test, however, so I added a slightly modified version of Tianmin’s reproducer. New webrev at http://cr.openjdk.java.net/~phh/8231387/webrev.01/ The test fails without the fix. From: Valerie Peng Organization: Oracle Corporation Date: Tuesday,

Re: RFR (XS) JDK-8231387 "java.security.Provider.getService returns random result due to race condition with mutating methods in the same class"

2019-09-24 Thread Valerie Peng
I am the security reviewer that you need. One should be enough. ;) Valerie On 9/24/2019 2:37 PM, Hohensee, Paul wrote: Yes, I’ll sponsor. Though it looks ok to me, I’m not a security expert, so do we need another security reviewer? *From: *security-dev on behalf of Valerie Peng

Re: RFR (XS) JDK-8231387 "java.security.Provider.getService returns random result due to race condition with mutating methods in the same class"

2019-09-24 Thread Hohensee, Paul
Yes, I’ll sponsor. Though it looks ok to me, I’m not a security expert, so do we need another security reviewer? From: security-dev on behalf of Valerie Peng Organization: Oracle Corporation Date: Tuesday, September 24, 2019 at 2:17 PM To: "security-dev@openjdk.java.net" Subject: Re: RFR

Re: RFR [XS] 8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14

2019-09-24 Thread Valerie Peng
Hi Matthias, The output on line 324 may report inconsistent info - the provider in use may not be NSS but yet you put NSS version with provider name? Since you are updating the code here, how about re-org the code a bit and first check for whether NSS provider is used then do the various

Re: RFR (XS) JDK-8231387 "java.security.Provider.getService returns random result due to race condition with mutating methods in the same class"

2019-09-24 Thread Valerie Peng
Changes look fine. I suppose Paul will help sponsoring the fix as he is listed as the RE for 8231387? Thanks, Valerie On 9/24/2019 12:36 PM, Shi, Tianmin wrote: Hi Can someone help reviewing this fix? Bug: https://bugs.openjdk.java.net/browse/JDK-8231387 Webrev:

RFR (XS) JDK-8231387 "java.security.Provider.getService returns random result due to race condition with mutating methods in the same class"

2019-09-24 Thread Shi, Tianmin
Hi Can someone help reviewing this fix? Bug: https://bugs.openjdk.java.net/browse/JDK-8231387 Webrev: http://cr.openjdk.java.net/~phh/8231387/webrev.00/ Thank you, Tianmin Shi

Re: JDK 14 RFR of JDK-8231368: Suppress warnings on non-serializable non-transient instance fields in java.security.jgss

2019-09-24 Thread Seán Coffey
Looks fine Joe. regards, Sean. On 23/09/2019 17:15, Joe Darcy wrote: Hello, Another module, another review request as part of making serial warnings more robust:     JDK-8231368: Suppress warnings on non-serializable non-transient instance fields in java.security.jgss    

Re: RFR: 8231351: Add notes for PKCS11 tests in the test doc

2019-09-24 Thread Erik Joelsson
Sure, will do. /Erik On 2019-09-23 20:57, Jia Huang wrote: Hi Erik, Thank you for your review and valuable comments. Updated: http://cr.openjdk.java.net/~jiefu/8231351-huangjia/webrev.01/  - The reference to the pkcs11 README and the reviewers had been added. Please note the user in the

RE: RFR [XS] 8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14

2019-09-24 Thread Langer, Christoph
Hi Matthias, looks good to me. One minor style nit: You could close the else case in line 335 with "}" and then have just one throw e; after the whole if else block. Best regards Christoph From: Baesken, Matthias Sent: Dienstag, 24. September 2019 10:30 To: Langer, Christoph ;

Re: [14] RFR 8228659: Record which Java methods are called by native codes in JGSS and JAAS

2019-09-24 Thread Sean Mullan
Just a couple of minor comments: 1. For comments like this: // Warning: Used by NativeCreds.c and nativeccache.c I think not capitalizing "Used" would be better. Also, would "called by" be more appropriate? Result: // Warning: called by NativeCreds.c and nativeccache.c 2. Sometimes you end

Re: RFR: 8231351: Add notes for PKCS11 tests in the test doc

2019-09-24 Thread Jie Fu
Hi John Jiang, I don't care which NSS you have skipped. I am just curious about the root cause for the failure on Ubuntu. It seems more reasonable to close JDK-8231338 as won't fix. But you just closed it as can't reproduce. Thanks. Best regards, Jie On 2019/9/24 下午4:01, sha.ji...@oracle.com

RE: RFR [XS] 8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14

2019-09-24 Thread Baesken, Matthias
New webrev : http://cr.openjdk.java.net/~mbaesken/webrevs/8231357.1/ I adjusted the imports and now output a warning . Best regards, Matthias From: Baesken, Matthias Sent: Montag, 23. September 2019 16:07 To: Langer, Christoph ; security-dev@openjdk.java.net Cc: Zeller, Arno Subject: RE: RFR

Re: RFR: 8231351: Add notes for PKCS11 tests in the test doc

2019-09-24 Thread sha . jiang
Hi Jie, IIRC, this test passed on your Ubuntu 18.04 with a new built NSS 3.35 libs. So, I suspected your Linux or the system built-in NSS libs had something wrong. Now that this test passed with NSS 3.35 on others' Linux, including mine, it may not make sense that this test is skipped for NSS

Re: RFR: 8231351: Add notes for PKCS11 tests in the test doc

2019-09-24 Thread Jie Fu
I can't understand why JDK-8231338 was closed as "Cannot Reproduce" since it can always be reproduced on Ubuntu 18.04.2 LTS. Reproduce on Ubuntu 18.04 is very simple: - make test TEST="jtreg:sun/security/pkcs11/Secmod/AddTrustedCert.java" CONF=re

Re: RFR: 8231351: Add notes for PKCS11 tests in the test doc

2019-09-24 Thread Xuelei Fan
I may be a little bit hesitate to add such words, "highly recommended to use the latest NSS version ...", in the general TOP doc. There are a few issues that I wary about: It is not always expected that all PKCS 11 test should be run on latest NSS version. Otherwise, there might be