[Bug 2390] [IcedTea7] Make elliptic curve removal optional
bugzilla-daemon at icedtea.classpath.org
bugzilla-daemon at icedtea.classpath.org
Thu Feb 25 08:33:28 UTC 2016
http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2390
--- Comment #8 from Tomas Gustavsson <tomas at primekey.se> ---
Sorry, will not re-open again.
It _used_ to be that if the PKCS#11 provider was configured with a full
featured PKCS#11 stack such as SafeNet, Thales, Utimaco or any other hardware
security module, these curves _were_ usable.
I still withhold. With these changes Java is less usable for security
interested industries such as Banking, government etc, which does use other
curves.
Saying that it's configurable when building OpenJDK doesn't help much since
banks and others want to use RHEL with packaged Java.
Cheers,
Tomas
--
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20160225/4787127a/attachment.html>
More information about the distro-pkg-dev
mailing list