Re: [Update]: JEP 249 (OCSP Stapling for TLS)

2015-07-19 Thread Jamil Nimeh
On 07/18/2015 04:56 PM, Xuelei Fan wrote: In the new webrev, you try the approach to throw exceptions CertificateStatus constructor and catch it in ServerHandshaker. It is a kind a abuse of SSLHandshakeException. I would like to make the checking before construct CertificateStatus in ServerHa

Re: RFR: JDK-8131486 : SecureClassLoader key for ProtectionDomain cache also needs to take into account certificates

2015-07-19 Thread Sean Mullan
On 07/17/2015 08:00 PM, Weijun Wang wrote: The change looks fine. That said, is CodeSource's hashCode/equals used somewhere else? I mean, can we directly update them? It might affect third party policy providers. We would also need to update the CodeSource.equals specification. I think it is

Re: RFR: JDK-8131486 : SecureClassLoader key for ProtectionDomain cache also needs to take into account certificates

2015-07-19 Thread Weijun Wang
On 07/20/2015 07:37 AM, Sean Mullan wrote: On 07/17/2015 08:00 PM, Weijun Wang wrote: The change looks fine. That said, is CodeSource's hashCode/equals used somewhere else? I mean, can we directly update them? It might affect third party policy providers. We would also need to update the Co

Re: RFR 8131350: policytool can directly reference permission classes

2015-07-19 Thread Weijun Wang
Ping again. Also, this change is needed inside jdk9/dev: diff --git a/modules.xml b/modules.xml --- a/modules.xml +++ b/modules.xml @@ -1777,6 +1777,11 @@ jdk.policytool java.base java.desktop +java.logging +java.management +java.security.jgss +java.sql +jdk.se