Re: RFR: 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols

2019-12-05 Thread Sean Mullan
Looks good, and I see you have also drafted a CSR for this: https://bugs.openjdk.java.net/browse/JDK-8235350 This looks good so I added my name as Reviewer. My only comment is that you could be more specific about the fully-qualified names of the APIs (instead of just getEnabledProtocols) and

Re: RFR: 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols

2019-12-05 Thread Rajan Halade
The method at line 596 is only called at line 855 from customizedProtocols class. It should really be read as getServerDefaultProtocols. Supported protocols are returned correctly on SSLEngine, SSLServerSocket, and SSLSocket. I thought about cleaning/renaming it but then AbstractTLSContext

RE: RFR(S): 8220348: [ntintel] asserts about copying unalinged array

2019-12-05 Thread Doerr, Martin
Hi Thomas and Christoph, thanks for the reviews. Other code in java.security.jgss also uses these #defined checks: src/java.security.jgss/share/native/libj2gss/gssapi.h:#if defined (_WIN32) && defined (_MSC_VER) I’d like to have it consistent with that. @Christoph: I think having

RE: SunPKCS11 connection lost after Decrypt doFinal (noPadding) openjdk 8_232

2019-12-05 Thread DEBORDEAUX Hubert
I reproduced the issue using AdoptOpenJDK 8_232 on Windows 10. One of our customers faced the same problem on CentOS 7.6. I guess it is the regular CentOS distribution. Our first analysis of pkcs11 changes has been done on the following file :

RE: SunPKCS11 connection lost after Decrypt doFinal (noPadding) openjdk 8_232

2019-12-05 Thread DEBORDEAUX Hubert
Hello, Thank you for the quick response. The HSM we are using is the Bull Proteccio Trustway. This is the pkcs11 config file : name = Proteccio_PKCS11 library = /opt/bull/client/nethsm.so slot = 1 attributes = compatibility Thanks, Hubert -Original Message- From: Valerie Peng

RE: RFR(S): 8220348: [ntintel] asserts about copying unalinged array

2019-12-05 Thread Langer, Christoph
Hi Martin, I can see that both places already include headers from src/java.base/share/native/libjava/. I suggest adding the define in jni_util.h. WindowsPreferences.c already includes it. Best regards Christoph From: Doerr, Martin Sent: Donnerstag, 5. Dezember 2019 12:00 To: Thomas Stüfe ;