Re: [security-dev 01698]: Re: Please review new regression test for java.net.* API

2010-03-18 Thread Andrew John Hughes
On 18 March 2010 21:12, Christopher Hegarty -Sun Microsystems Ireland wrote: > Andrew John Hughes wrote: >> >> On 18 March 2010 20:56, Christopher Hegarty -Sun Microsystems Ireland >> wrote: >>> >>> Brad, Pavel, Andrew, >>> >>> I'm also not comfortable with this test, but what bothers me more tha

Re: [security-dev 01698]: Re: Please review new regression test for java.net.* API

2010-03-18 Thread Christopher Hegarty -Sun Microsystems Ireland
Andrew John Hughes wrote: On 18 March 2010 20:56, Christopher Hegarty -Sun Microsystems Ireland wrote: Brad, Pavel, Andrew, I'm also not comfortable with this test, but what bothers me more than the reliance on an external server is the reliance on cacerts. While cacerts (or equivalent) is not

Re: [security-dev 01698]: Re: Please review new regression test for java.net.* API

2010-03-18 Thread Andrew John Hughes
On 18 March 2010 20:56, Christopher Hegarty -Sun Microsystems Ireland wrote: > Brad, Pavel, Andrew, > > I'm also not comfortable with this test, but what bothers me more than the > reliance on an external server is the reliance on cacerts. While cacerts (or > equivalent) is not part of OpenJDK I d

Re: [security-dev 01698]: Re: Please review new regression test for java.net.* API

2010-03-18 Thread Christopher Hegarty -Sun Microsystems Ireland
Brad, Pavel, Andrew, I'm also not comfortable with this test, but what bothers me more than the reliance on an external server is the reliance on cacerts. While cacerts (or equivalent) is not part of OpenJDK I don't think it makes sense adding a test to OpenJDK that has a reliance on it. For

Re: [security-dev 01698]: Re: Please review new regression test for java.net.* API

2010-03-18 Thread Andrew John Hughes
On 18 March 2010 18:40, Brad Wetmore wrote: > > I have a couple important tasks to finish ASAP, so if there is more > discussion, I'll have to jump in sometime next week, but wanted to add > one thing before anything was done: > > Pavel wrote: >> And we can use other URL if verisign.com is problem

Re: [security-dev 01698]: Re: Please review new regression test for java.net.* API

2010-03-18 Thread Brad Wetmore
I have a couple important tasks to finish ASAP, so if there is more discussion, I'll have to jump in sometime next week, but wanted to add one thing before anything was done: Pavel wrote: > And we can use other URL if verisign.com is problematic. We've tried to limit the reliance on servers outs