Re: RFR: 8254162: Implementation of Foreign-Memory Access API (Third Incubator) [v17]

2020-10-27 Thread Maurizio Cimadamore
> This patch contains the changes associated with the third incubation round of > the foreign memory access API incubation (see JEP 393 [1]). This iteration > focus on improving the usability of the API in 3 main ways: > > * first, by providing a way to obtain truly *shared* segments, which can

Integrated: 8007632: DES/3DES keys support in PKCS12 keystore

2020-10-27 Thread Alexey Bakhtin
On Tue, 27 Oct 2020 12:27:52 GMT, Alexey Bakhtin wrote: > Hi All, > > DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 > keystores. > This issue prevents the migration of legacy applications to PKCS#12 keystore. > For example, an application has some old 3DES keys th

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore [v3]

2020-10-27 Thread Hai-May Chao
On Tue, 27 Oct 2020 17:59:38 GMT, Weijun Wang wrote: >> Alexey Bakhtin has updated the pull request incrementally with one >> additional commit since the last revision: >> >> Fix order of OIDs > > Marked as reviewed by weijun (Reviewer). Change looks good. - PR: https://git.ope

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore [v3]

2020-10-27 Thread Weijun Wang
On Tue, 27 Oct 2020 17:58:35 GMT, Alexey Bakhtin wrote: >> Hi All, >> >> DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 >> keystores. >> This issue prevents the migration of legacy applications to PKCS#12 >> keystore. For example, an application has some old 3DES k

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore [v3]

2020-10-27 Thread Alexey Bakhtin
> Hi All, > > DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 > keystores. > This issue prevents the migration of legacy applications to PKCS#12 keystore. > For example, an application has some old 3DES keys that are required for > certain legacy features. Java PKCS1

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore [v2]

2020-10-27 Thread Alexey Bakhtin
> Hi All, > > DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 > keystores. > This issue prevents the migration of legacy applications to PKCS#12 keystore. > For example, an application has some old 3DES keys that are required for > certain legacy features. Java PKCS1

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore [v2]

2020-10-27 Thread Weijun Wang
On Tue, 27 Oct 2020 17:46:35 GMT, Alexey Bakhtin wrote: >> Hi All, >> >> DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 >> keystores. >> This issue prevents the migration of legacy applications to PKCS#12 >> keystore. For example, an application has some old 3DES k

ECC Key Usage ignored

2020-10-27 Thread Daniel JeliƄski
Hi all, TL;DR: both SSL server and client ignore KeyUsage certificate extension when determining the list of available cipher suites. They shouldn't; KeyUsage is the only differentiator between ECDH and ECDSA certificates. Long version: I'm experimenting with ECC certificates on my Jetty server;

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore

2020-10-27 Thread Weijun Wang
On Tue, 27 Oct 2020 16:52:03 GMT, Alexey Bakhtin wrote: >> Yes I can see the OIDs. I was just wondering if other vendors are also using >> the OID for DES/ECB when storing a DES key. After all, this is only a key >> and it can can be used with all Cipher modes. > > Verified with BC: BouncyCastl

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore

2020-10-27 Thread Alexey Bakhtin
On Tue, 27 Oct 2020 16:12:14 GMT, Weijun Wang wrote: >> At least BouncyCastle uses the same OIDs: >> http://javadox.com/org.bouncycastle/bcprov-jdk15on/1.51/org/bouncycastle/asn1/oiw/OIWObjectIdentifiers.html > > Yes I can see the OIDs. I was just wondering if other vendors are also using > the

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore

2020-10-27 Thread Weijun Wang
On Tue, 27 Oct 2020 14:44:09 GMT, Alexey Bakhtin wrote: >> src/java.base/share/classes/sun/security/util/KnownOIDs.java line 355: >> >>> 353: // OIW secsig 1.3.14.3.* >>> 354: OIW_DES_CBC("1.3.14.3.2.7", "DES/CBC"), >>> 355: OIW_DES_ECB("1.3.14.3.2.6", "DES/ECB", "DES"), >> >> What

Re: RFR: 8254162: Implementation of Foreign-Memory Access API (Third Incubator) [v16]

2020-10-27 Thread Maurizio Cimadamore
> This patch contains the changes associated with the third incubation round of > the foreign memory access API incubation (see JEP 393 [1]). This iteration > focus on improving the usability of the API in 3 main ways: > > * first, by providing a way to obtain truly *shared* segments, which can

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore

2020-10-27 Thread Alexey Bakhtin
On Tue, 27 Oct 2020 14:19:00 GMT, Weijun Wang wrote: >> Hi All, >> >> DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 >> keystores. >> This issue prevents the migration of legacy applications to PKCS#12 >> keystore. For example, an application has some old 3DES keys

Re: RFR: 8254162: Implementation of Foreign-Memory Access API (Third Incubator)

2020-10-27 Thread Maurizio Cimadamore
On Wed, 7 Oct 2020 17:13:22 GMT, Maurizio Cimadamore wrote: > This patch contains the changes associated with the third incubation round of > the foreign memory access API incubation (see JEP 393 [1]). This iteration > focus on improving the usability of the API in 3 main ways: > > * first,

Re: RFR: 8254162: Implementation of Foreign-Memory Access API (Third Incubator) [v15]

2020-10-27 Thread Maurizio Cimadamore
> This patch contains the changes associated with the third incubation round of > the foreign memory access API incubation (see JEP 393 [1]). This iteration > focus on improving the usability of the API in 3 main ways: > > * first, by providing a way to obtain truly *shared* segments, which can

Re: RFR: 8254162: Implementation of Foreign-Memory Access API (Third Incubator)

2020-10-27 Thread Aleksey Shipilev
On Wed, 7 Oct 2020 17:13:22 GMT, Maurizio Cimadamore wrote: > This patch contains the changes associated with the third incubation round of > the foreign memory access API incubation (see JEP 393 [1]). This iteration > focus on improving the usability of the API in 3 main ways: > > * first,

Re: RFR: 8007632: DES/3DES keys support in PKCS12 keystore

2020-10-27 Thread Weijun Wang
On Tue, 27 Oct 2020 12:27:52 GMT, Alexey Bakhtin wrote: > Hi All, > > DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 > keystores. > This issue prevents the migration of legacy applications to PKCS#12 keystore. > For example, an application has some old 3DES keys th

Re: RFR: 8254162: Implementation of Foreign-Memory Access API (Third Incubator) [v14]

2020-10-27 Thread Maurizio Cimadamore
> This patch contains the changes associated with the third incubation round of > the foreign memory access API incubation (see JEP 393 [1]). This iteration > focus on improving the usability of the API in 3 main ways: > > * first, by providing a way to obtain truly *shared* segments, which can

RFR: 8007632: DES/3DES keys support in PKCS12 keystore

2020-10-27 Thread Alexey Bakhtin
Hi All, DES and DESede keys are supported by JKS/JCEKS but not supported by PKCS#12 keystores. This issue prevents the migration of legacy applications to PKCS#12 keystore. For example, an application has some old 3DES keys that are required for certain legacy features. Java PKCS12 keystore doe