Re: code review request: 6969292: make DNS lookup for realm/kdc really work

2010-07-17 Thread Alan Bateman
Valerie (Yu-Ching) Peng wrote: Looks fine except the following minor nit: - Why not return realm on line 1224 after a match is found? Doesn't seem necessary to continue w/ the whole for-loop. Indeed, looks like it is missing a "break". -Alan.

Re: DSA and ECDSA signature format is incompatible with XMLDSig

2010-07-17 Thread Maarten Bodewes
On Thu, Jul 15, 2010 at 6:57 PM, Sean Mullan wrote: > I would like to try to fix a long-standing XMLDSig issue with the current > DSA and ECDSA signature bytes format. > > The format of the Signature bytes for these algorithms is an ASN.1 encoded > sequence of the integers r and s: > > SEQUENCE

"PKCS11" no longer supported for KeyStore

2010-07-17 Thread Jon Strauss
Some time ago I came across a regression beginning after the sun-jdk 1.6.13 release. This regression continues into openjdk. The issue at hand is a single line found in the current SunPKCS#11 documentation: KeyStore ks = KeyStore.getInstance("PKCS11"); KeyStore ks = KeyStore.getInstance("PKCS11