[Bug 2390] [IcedTea7] Make elliptic curve removal optional

[bugzilla-daemon at icedtea.classpath.org]

http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2390

--- Comment #14 from Andrew Haley <aph at redhat.com> ---
(In reply to Andrew John Hughes from comment #13)
> 
> I think, as a minimum, we could:
> 
> 1. Make SSL obtain the curve list from the provider
> 2. Populate the curve database from the provider, not vice versa.
> 
> and I can work on a patch for that. That could hopefully allow PKCS11 to
> list more curves than SunEC, though at the moment the PKCS11 provider
> doesn't appear to report the supported curves at all.

That sounds like a plan.  It'd be interesting to know what
security-dev at openjdk.java.net has to say about it.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20160302/15f40ada/attachment-0001.html>