Re: RFR: 8328119: Support HKDF in SunPKCS11 (Preview) [v8]

2025-01-02 Thread Valerie Peng
On Fri, 3 Jan 2025 02:01:13 GMT, Valerie Peng wrote: >> Martin Balao has updated the pull request incrementally with one additional >> commit since the last revision: >> >> Check disabled PKCS #11 mechanisms when concatenating keys and data. >> >> Co-authored-by: Martin Balao Alonso >>

Re: RFR: 8328119: Support HKDF in SunPKCS11 (Preview) [v8]

2025-01-02 Thread Valerie Peng
On Thu, 19 Dec 2024 19:41:23 GMT, Martin Balao wrote: >> We would like to propose an implementation of the HKDF algorithms for >> SunPKCS11, aligned with the KDF API proposed for JDK 24 (see [JEP 478: Key >> Derivation Function API >> (Preview)](https://bugs.openjdk.org/browse/JDK-8189808)). >

Re: RFR: 8328119: Support HKDF in SunPKCS11 (Preview) [v8]

2025-01-02 Thread Valerie Peng
On Thu, 19 Dec 2024 19:41:23 GMT, Martin Balao wrote: >> We would like to propose an implementation of the HKDF algorithms for >> SunPKCS11, aligned with the KDF API proposed for JDK 24 (see [JEP 478: Key >> Derivation Function API >> (Preview)](https://bugs.openjdk.org/browse/JDK-8189808)). >

Withdrawn: 8339891: Several sun/security/ssl/SSLSessionImpl/* tests override test.java.opts

2025-01-02 Thread duke
On Thu, 7 Nov 2024 15:44:56 GMT, Sonia Zaldana Calles wrote: > Hi all, > > This PR addresses [8339891](https://bugs.openjdk.org/browse/JDK-8339891). > With this patch, "test.java.opts" aggregates on options set via jtreg as > opposed to overriding them. > > Thanks, > Sonia This pull requ

Re: RFR: 8283795: Add TLSv1.3 and CNSA 1.0 algorithms to implementation requirements

2025-01-02 Thread Bernd
On Thu, 2 Jan 2025 14:41:48 GMT, Sean Mullan wrote: > Periodically, we review the security algorithm requirements to see if new > algorithms should be added or existing ones should be removed. The > requirements are intended to improve interoperability across different SE > implementations by

Re: RFR: 8341775: Duplicate manifest files are removed by jarsigner after signing [v3]

2025-01-02 Thread Weijun Wang
On Thu, 2 Jan 2025 15:30:50 GMT, Kevin Driver wrote: >> JDK-8341775: In the case where there is a *single* META-INF directory but >> potentially *multiple* manifest files of different cases, print a warning >> before selecting the first one and ignoring the rest (the current behavior >> should

Re: RFR: 8341775: Duplicate manifest files are removed by jarsigner after signing

2025-01-02 Thread Kevin Driver
On Mon, 2 Dec 2024 21:30:27 GMT, Weijun Wang wrote: > 1. The warning should only be shown by the `jarsigner` tool. `JarSigner` is > an API and should not write to `System.err`. @wangweij: See the note that is part of the PR description. I've copied it below for convenience: --8<-- **Note**:

Re: RFR: 8283795: Add TLSv1.3 and CNSA 1.0 algorithms to implementation requirements

2025-01-02 Thread Jamil Nimeh
On Thu, 2 Jan 2025 14:41:48 GMT, Sean Mullan wrote: > Periodically, we review the security algorithm requirements to see if new > algorithms should be added or existing ones should be removed. The > requirements are intended to improve interoperability across different SE > implementations by

Re: RFR: 8341775: Duplicate manifest files are removed by jarsigner after signing [v3]

2025-01-02 Thread Kevin Driver
> JDK-8341775: In the case where there is a *single* META-INF directory but > potentially *multiple* manifest files of different cases, print a warning > before selecting the first one and ignoring the rest (the current behavior > should be maintained). > > **Note**: We cannot (so far) pass whe

RFR: 8283795: Add TLSv1.3 and CNSA 1.0 algorithms to implementation requirements

2025-01-02 Thread Sean Mullan
Periodically, we review the security algorithm requirements to see if new algorithms should be added or existing ones should be removed. The requirements are intended to improve interoperability across different SE implementations by requiring a set of commonly used algorithms. The algorithms ar