[Bug 2390] [IcedTea7] Make elliptic curve removal optional

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2390

Andrew John Hughes <gnu.andrew at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #7 from Andrew John Hughes <gnu.andrew at redhat.com> ---
Please do not re-open this bug. It has long since shipped.

As to the resolution, we have made this removal optional. It is not IcedTea's
place to make legal decisions on what is shipped; we leave that to individual
distributions.

NSS is relevant here because the SunEC provider uses NSS and PKCS#11 can also
be configured with NSS. If NSS does not provide the curves, then they will not
be usable by these providers. Having a mismatch between the native code and
what Java reports leads to less obvious failures further down the stack, which
is why we removed them in the Java code to begin with.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20160224/4d9547a1/attachment-0001.html>