Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Wang Weijun
OK, it's fine. Please go on. > On May 17, 2016, at 12:03 PM, Xuelei Fan wrote: > > On 5/17/2016 11:50 AM, Wang Weijun wrote: >> You mentioned hacked keytool. So the X.509 v3 certs cannot be used? >> > In order to simplify the update (as less update as possible), I would > like to keep the root

Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Xuelei Fan
On 5/17/2016 11:50 AM, Wang Weijun wrote: > You mentioned hacked keytool. So the X.509 v3 certs cannot be used? > In order to simplify the update (as less update as possible), I would like to keep the root certs version 1 although most of the test case should accept version 3. BTW, it would be ni

Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Wang Weijun
You mentioned hacked keytool. So the X.509 v3 certs cannot be used? Thanks Max > On May 17, 2016, at 11:44 AM, Xuelei Fan wrote: > > Update the README with more information about the stores. > http://cr.openjdk.java.net/~xuelei/8157035/webrev.02/ > > Thanks, > Xuelei > > On 5/16/2016 10:37 P

Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Xuelei Fan
Update the README with more information about the stores. http://cr.openjdk.java.net/~xuelei/8157035/webrev.02/ Thanks, Xuelei On 5/16/2016 10:37 PM, Xuelei Fan wrote: > On 5/16/2016 10:24 PM, Wang Weijun wrote: On May 16, 2016, at 9:34 PM, Xuelei Fan wrote: On 5/16/2016 9:13 P

Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Xuelei Fan
On 5/16/2016 10:24 PM, Wang Weijun wrote: >> > On May 16, 2016, at 9:34 PM, Xuelei Fan wrote: >> > >> > On 5/16/2016 9:13 PM, Wang Weijun wrote: >>> >> I downloaded the files and they match what you described below. >>> >> >>> >> Can you please added a text file describing how they are generated

Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Wang Weijun
> On May 16, 2016, at 9:34 PM, Xuelei Fan wrote: > > On 5/16/2016 9:13 PM, Wang Weijun wrote: >> I downloaded the files and they match what you described below. >> >> Can you please added a text file describing how they are generated. > The generation is straightforward with keytool. May not n

Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Xuelei Fan
On 5/16/2016 9:13 PM, Wang Weijun wrote: > I downloaded the files and they match what you described below. > > Can you please added a text file describing how they are generated. The generation is straightforward with keytool. May not need an additional text file any more. > Also, I see a unknow

Re: Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Wang Weijun
I downloaded the files and they match what you described below. Can you please added a text file describing how they are generated. Also, I see a unknown_keystore in the same directory still using the weak algorithms. Do you also intent to update it? Thanks Max > On May 16, 2016, at 8:52 PM, X

Code Review Request of JDK-8157035 Use stronger algorithms and keys for JSSE testing

2016-05-16 Thread Xuelei Fan
Hi, Please review this test update: http://cr.openjdk.java.net/~xuelei/8157035/webrev.00/ test/javax/net/ssl/etc/keystore and truststore are used a lot for X.509 cert based SSL/TLS authentication in JDK testing. MD5 and SHA1 are used as the signature algorithms. The key size of EC certs is 19