Re: Use of OpenSSL as JCE security provider if available on system

2019-04-12 Thread coderaptor
I may be off-mark here (since I did not go over the mail thread with a fine comb), but one possible use is to satisfy cases where FIPS 140-2 validated library is a requirement. Currently, there are very few options in the market (BouncyCastle is FIPS 140-2, RSA BSAFE has exited), so the ability to

Re: RFR 8212003: Obsoleting the default keytool -keyalg option

2018-11-09 Thread coderaptor
The CSR looks fine to me. Thanks. -coderaptor On Wed, Nov 7, 2018 at 7:53 AM Weijun Wang wrote: > > Oops, I take this back. The CSR needs more update. > > Sorry if you have already start reading it. > > Thanks > Max > > > > On Nov 7, 2018, at 9:27 AM, Weiju

RFC 7627 functionality (session hash and extended master secret extension) in JSSE?

2016-01-27 Thread coderaptor
When would the TLS protocol changes as defined by RFC 7627 be committed to JSSE? So far my search has turned up nothing (no open feature request or bug on OpenJDK, nor anything in web-searches). I realize the RFC was finalized fairly recent, and the mitigation has been in JSSE for a while now. Tha