Re: RFR: 8319136: Skip pkcs11 tests on linux-aarch64

2023-10-30 Thread Rajan Halade
On Mon, 30 Oct 2023 19:57:02 GMT, Matthew Donovan wrote: > Due to test failures on OL 7.9 aarch64, this PR skips tests for LInux > aarch64. The MultipleLogin.sh script had to be added to the ProblemList > because it reported error when the Java component threw the skipped exception. > > Tests

Re: RFR: 8009550: PlatformPCSC should load versioned so [v2]

2023-10-30 Thread Andrew John Hughes
On Tue, 5 Sep 2023 10:17:31 GMT, Andrew John Hughes wrote: >> There is a long standing limitation in the UNIX smartcardio implementation >> which means it will only look for the `pcsclite` library in two locations; >> `/usr/lib` and `/usr/local/lib`. It also only searches for an unversioned >>

Integrated: 8009550: PlatformPCSC should load versioned so

2023-10-30 Thread Andrew John Hughes
On Thu, 24 Aug 2023 00:53:03 GMT, Andrew John Hughes wrote: > There is a long standing limitation in the UNIX smartcardio implementation > which means it will only look for the `pcsclite` library in two locations; > `/usr/lib` and `/usr/local/lib`. It also only searches for an unversioned > li

Re: RFR: 8311596: Add separate system properties for TLS server and client for maximum chain length [v10]

2023-10-30 Thread Weijun Wang
On Mon, 30 Oct 2023 22:08:44 GMT, Hai-May Chao wrote: >> Please review the enhancement for JDK-8311596 and its CSR JDK-8313236. Thank >> you. > > Hai-May Chao has updated the pull request incrementally with one additional > commit since the last revision: > > Updated to not longer than 80-ch

Re: RFR: 8311596: Add separate system properties for TLS server and client for maximum chain length [v10]

2023-10-30 Thread Hai-May Chao
> Please review the enhancement for JDK-8311596 and its CSR JDK-8313236. Thank > you. Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision: Updated to not longer than 80-chars - Changes: - all: https://git.openjdk.org/jdk/p

Re: RFR: 8311596: Add separate system properties for TLS server and client for maximum chain length [v8]

2023-10-30 Thread Hai-May Chao
On Mon, 30 Oct 2023 14:14:25 GMT, Sean Mullan wrote: >> src/java.base/share/classes/sun/security/ssl/SSLConfiguration.java line 178: >> >>> 176: * the jdk.tls.maxCertificateChainLength property will not >>> override >>> 177: * the values. >>> 178: */ >> >> English is

Re: RFR: 8311596: Add separate system properties for TLS server and client for maximum chain length [v9]

2023-10-30 Thread Hai-May Chao
> Please review the enhancement for JDK-8311596 and its CSR JDK-8313236. Thank > you. Hai-May Chao has updated the pull request incrementally with one additional commit since the last revision: Update comments and property process code - Changes: - all: https://git.openjdk.org

Re: RFR: 8311596: Add separate system properties for TLS server and client for maximum chain length [v7]

2023-10-30 Thread Hai-May Chao
On Fri, 27 Oct 2023 20:22:05 GMT, Weijun Wang wrote: >> This belongs to the `if (inboundClientLen == null || inboundClientLen < 0)` >> side. The else side stays the same. > > Precisely, it's > > if (inboundServerLen == null || inboundServerLen < 0) { > maxInboundClientCertCh

Re: RFR: 8311596: Add separate system properties for TLS server and client for maximum chain length [v7]

2023-10-30 Thread Hai-May Chao
On Fri, 27 Oct 2023 20:08:25 GMT, Weijun Wang wrote: >> Hai-May Chao has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Change property names to clearly indicate client side and server side > > src/java.base/share/classes/sun/security/ssl/S

Re: RFR: 8308453: Convert JKS test keystores in test/jdk/javax/net/ssl/etc to PKCS12 [v8]

2023-10-30 Thread Kevin Driver
> JDK-8308453: JSSE regression test keystore migration from JKS to PKCS12 Kevin Driver has updated the pull request incrementally with one additional commit since the last revision: revert files - Changes: - all: https://git.openjdk.org/jdk/pull/16159/files - new: https://git

RFR: 8319136: Skip pkcs11 tests on linux-aarch64

2023-10-30 Thread Matthew Donovan
Due to test failures on OL 7.9 aarch64, this PR skips tests for LInux aarch64. The MultipleLogin.sh script had to be added to the ProblemList because it reported error when the Java component threw the skipped exception. Tests will be fixed in JDK-8319128. - Commit messages: - 831

Re: RFR: 8311546: Certificate name constraints improperly validated with leading period [v2]

2023-10-30 Thread Ben Perez
> Updated the `constrains` method in `DNSName.java` to accept certificates with > a leading period. Ben Perez has updated the pull request incrementally with one additional commit since the last revision: Updated documentation, minor fixes in test - Changes: - all: https://git

Re: RFR: 8317538: RSA have scalability issue for high vCPU numbers [v2]

2023-10-30 Thread Ferenc Rakoczi
On Fri, 27 Oct 2023 22:22:46 GMT, Ben Perez wrote: >> Modified `getService` method to prevent caching of `ServiceKey`, which was >> negatively impacting multithreaded performance > > Ben Perez has updated the pull request incrementally with one additional > commit since the last revision: > >

Re: RFR: 8311596: Add separate system properties for TLS server and client for maximum chain length [v8]

2023-10-30 Thread Sean Mullan
On Fri, 27 Oct 2023 20:17:15 GMT, Weijun Wang wrote: >> Hai-May Chao has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Change maxCertificateChainLength to be a local variable > > src/java.base/share/classes/sun/security/ssl/SSLConfiguratio

Re: RFR: 8317538: RSA have scalability issue for high vCPU numbers [v2]

2023-10-30 Thread Aleksey Shipilev
On Fri, 27 Oct 2023 22:22:46 GMT, Ben Perez wrote: >> Modified `getService` method to prevent caching of `ServiceKey`, which was >> negatively impacting multithreaded performance > > Ben Perez has updated the pull request incrementally with one additional > commit since the last revision: > >