Re: RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v40]

2024-09-19 Thread Kevin Driver
On Wed, 18 Sep 2024 13:32:06 GMT, Sean Mullan wrote: >> Kevin Driver has updated the pull request incrementally with one additional >> commit since the last revision: >> >> IDE formatting broke snippet > > src/java.base/share/classes/javax/crypto/KDF.java line 331: > >> 329: * i

Re: RFR: 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server [v3]

2024-09-19 Thread Artur Barashev
> https://bugs.openjdk.org/browse/JDK-8331682 Artur Barashev has updated the pull request incrementally with one additional commit since the last revision: Add assertions. Add the final server wrap - Changes: - all: https://git.openjdk.org/jdk/pull/21043/files - new: https://

Re: RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v44]

2024-09-19 Thread Weijun Wang
On Thu, 19 Sep 2024 19:16:22 GMT, Kevin Driver wrote: >> Introduce an API for Key Derivation Functions (KDFs), which are >> cryptographic algorithms for deriving additional keys from a secret key and >> other data. See [JEP 478](https://openjdk.org/jeps/478). >> >> Work was begun in [another P

Re: RFR: 8331008: Implement JEP 478: Key Derivation Function API (Preview) [v44]

2024-09-19 Thread Kevin Driver
> Introduce an API for Key Derivation Functions (KDFs), which are cryptographic > algorithms for deriving additional keys from a secret key and other data. See > [JEP 478](https://openjdk.org/jeps/478). > > Work was begun in [another PR](https://github.com/openjdk/jdk/pull/18924). Kevin Driver

Integrated: 8339735: Remove references to Applet in core-libs/security APIs

2024-09-19 Thread Justin Lu
On Tue, 17 Sep 2024 23:14:16 GMT, Justin Lu wrote: > Please review this PR which removes occurrences of 'applet' within the > corelibs specification. Applet has been deprecated since JDK9, and may be a > confusing term for new Java developers, so it should be removed from the > documentation.

Re: RFR: 8339735: Remove references to Applet in core-libs/security APIs [v2]

2024-09-19 Thread Justin Lu
On Wed, 18 Sep 2024 17:59:40 GMT, Justin Lu wrote: >> Please review this PR which removes occurrences of 'applet' within the >> corelibs specification. Applet has been deprecated since JDK9, and may be a >> confusing term for new Java developers, so it should be removed from the >> documentati

Re: RFD: Security Providers Filter (JEP)

2024-09-19 Thread Sean Mullan
Hi Martin, Our team at Oracle has done another review of the proposed feature and we have some questions that we would like to discuss below. This is a significant effort that would add some valuable features to the Security Provider mechanism. However, this is also modifying an important co

Integrated: 8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options

2024-09-19 Thread Prasadrao Koppula
On Wed, 18 Sep 2024 12:19:18 GMT, Prasadrao Koppula wrote: > Updated the code to call buildTrustedCerts only when the -trustcacerts option > is specified This pull request has now been integrated. Changeset: c9bee173 Author:Prasadrao Koppula Committer: Sean Coffey URL: https://gi

Re: RFR: 8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options

2024-09-19 Thread duke
On Wed, 18 Sep 2024 12:19:18 GMT, Prasadrao Koppula wrote: > Updated the code to call buildTrustedCerts only when the -trustcacerts option > is specified @prkoppul Your change (at version 1c0fb43481eb288a059aabdb244762c8bfba0d12) is now ready to be sponsored by a Committer. - P

Re: RFR: 8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options

2024-09-19 Thread Sean Mullan
On Wed, 18 Sep 2024 12:19:18 GMT, Prasadrao Koppula wrote: > Updated the code to call buildTrustedCerts only when the -trustcacerts option > is specified Marked as reviewed by mullan (Reviewer). - PR Review: https://git.openjdk.org/jdk/pull/21058#pullrequestreview-2315476246

Re: 8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts.

2024-09-19 Thread Sean Mullan
Hi, This list is primarily for discussing and reviewing security related topics (bugs, enhancements, etc) for the JDK mainline (https://github.com/openjdk/jdk/). Please use the jdk-updates-dev list for issues that relate to previous JDK releases. I see that the assignee has already asked for

Re: RFR: 8309841: Jarsigner should print a warning if an entry is removed [v5]

2024-09-19 Thread Weijun Wang
> There ~are two~ is one change~s~: > > 1. In `jarsigner -verify`, check a .SF file contains un-existing entries and > print them out as > > Warning: nonexistent signed entries detected: [a] > > ~2. In `JarSigner::sign0`, when creating a new .SF file, only include signed > file entries.~ > >

Re: RFR: 8339735: Remove references to Applet in core-libs/security APIs [v2]

2024-09-19 Thread Sean Mullan
On Wed, 18 Sep 2024 17:59:40 GMT, Justin Lu wrote: >> Please review this PR which removes occurrences of 'applet' within the >> corelibs specification. Applet has been deprecated since JDK9, and may be a >> confusing term for new Java developers, so it should be removed from the >> documentati

8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts.

2024-09-19 Thread Hempushpa Sahu
Hi Team, We are working on a case, and the customer is awaiting the fix. To deliver the fix, this PR https://github.com/openjdk/jdk17u-dev/pull/2747 needs to be merged. We requested an update on the review progress on August 20, 2024, but no progress has been made since then. It has been over a