[Bug 3655] [IcedTea8] Allow use of system crypto policy to be disabled by the user

Tue Dec 25 01:09:52 UTC 2018

https://icedtea.classpath.org/bugzilla/show_bug.cgi?id=3655

--- Comment #4 from hg commits <mercurial at icedtea.classpath.org> ---
details:
http://icedtea.classpath.org//hg/icedtea8?cmd=changeset;node=2bbb77456fce
author: Andrew John Hughes <gnu_andrew at member.fsf.org>
date: Thu Dec 20 04:39:13 2018 +0000

    Bump to icedtea-3.10.0.

    Upstream changes:
      - PR3655: Allow use of system crypto policy to be disabled by the user
      - S8033251: Use DWARF debug symbols for Linux 32-bit as default
      - S8038636: speculative traps break when classes are redefined
      - S8049834: Two security tools tests do not run with only JRE
      - S8055008: Clean up code that saves the previous versions of redefined
classes
      - S8057570: RedefineClasses() tests fail
assert(((Metadata*)obj)->is_valid()) failed: obj is valid
      - S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java fails if SA
not available
      - S8074373: NMT is not enabled if NMT option is specified after class
path specifiers
      - S8074462: Handshake messages can be strictly ordered
      - S8076117: EndEntityChecker should not process custom extensions after
PKIX validation
      - S8130132: jarsigner should emit warning if weak algorithms or keysizes
are used
      - S8142927: Feed some text to STDIN in ProcessTools.executeProcess()
      - S8146115: Improve docker container detection and resource configuration
usage
      - S8146377: test/sun/security/tools/jarsigner/concise_jarsigner.sh
failing
      - S8152974: AWT hang occurrs when sequenced events arrive out of sequence
      - S8155627, PR3651: Enable SA on AArch64
      - S8156137: SIGSEGV in ReceiverTypeData::clean_weak_klass_links
      - S8158887: sun/security/tools/jarsigner/concise_jarsigner.sh timed out
      - S8164480: Crash with assert(handler_address ==
SharedRuntime::compute_compiled_exc_handler(..) failed: Must be the same
      - S8168628: (fc) SIGBUS when extending file size to map it
      - S8170035: When determining the ciphersuite lists, there is no debug
output for disabled suites.
      - S8171452: (ch) linux io_util_md: Operation not supported exception
after 8168628
      - S8172529: Use PKIXValidator in jarsigner
      - S8175075: Add 3DES to the default disabled algorithm security property
      - S8176072: READING attributes are not available on TSF
      - S8180289: jarsigner treats timestamped signed jar invalid after the
signer cert expires
      - S8182362: Update CipherOutputStream Usage
      - S8183504: 8u131 Win 10, issue with wrong position of Sogou IME popup
      - S8186032: Disable XML Signatures signed with EC keys less than 224 bits
      - S8187045: [linux] Not all libraries in the VM are linked with
-z,noexecstack
      - S8187577: JVM crash during gc doing concurrent marking
      - S8187635: On Windows Swing changes keyboard layout on a window
activation
      - S8187803: JDK part of JavaFX-Swing dialogs appearing behind main stage
      - S8189762: [TESTBUG] Create tests for JDK-8146115 container awareness
and resource configuration
      - S8189969: Manifest better manifest entries
      - S8189981: Improve queuing portability
      - S8189985: Improve tabular data portability
      - S8189993: Improve document portability
      - S8189997: Enhance keystore mechanisms
      - S8190674: sun/security/tools/jarsigner/TimestampCheck.java failed with
java.nio.file.NoSuchFileException: ts2.cert
      - S8191239: Improve desktop file usage
      - S8191909: Nightly failures in nashorn suite
      - S8192025: Less referential references
      - S8192757: Improve stub classes implementation
      - S8192987: keytool should remember real storetype if it is not provided
      - S8193409: Improve AES supporting classes
      - S8193419: Better Internet address support
      - S8193833: Better RMI connection support
      - S8193892: Impact of noncloneable MessageDigest implementation
      - S8194259: keytool error: java.io.IOException: Invalid secret key format
      - S8194534: Manifest better support
      - S8194546: Choosier FileManagers
      - S8195868: Address Internet Addresses
      - S8195874: Improve jar specification adherence
      - S8196224: Even better Internet address support
      - S8196491: Newlines in JAXB string values of SOAP-requests are escaped
to "&#xa;"
      - S8196663: [TESTBUG] test/compiler/loopopts/TestCMovSplitThruPhi.java
fails on 32 bit Java
      - S8196897: Improve PRNG support
      - S8196902: Better HTTP redirection support
      - S8197030: Perf regression on all platforms with 8u171-b03 - early
lambda use
      - S8197518: Kerberos krb5 authentication: AuthList's put method leads to
performance issue
      - S8197871: Support Derby connections
      - S8197925: Better stack walking
      - S8198494: 8u171 and 8u172 - Build failure on non-SE Linux Platforms
      - S8198662: Incompatible internal API change in JDK8u161: signature of
method exportObject()
      - S8198794: Hotspot crash on Cassandra 3.11.1 startup with libnuma 2.0.3
      - S8198963: Fix new rmi property name
      - S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails in
compilation
      - S8199177: Enhance JNDI lookups
      - S8199226: Improve field accesses
      - S8199406: Performance drop with Java JDK 1.8.0_162-b32
      - S8199547: Exception to Pattern Syntax
      - S8200359: (tz) Upgrade time-zone data to tzdata2018d
      - S8200666: Improve LDAP support
      - S8201756: Improve cipher inputs
      - S8202261, PR3638: (fc) FileChannel.map and RandomAccessFile.setLength
should not preallocate space
      - S8202478: Backout JDK-8152974
      - S8202613: Improve TLS connections stability
      - S8202936: Improve script engine support
      - S8203654: Improve cypher state updates
      - S8204497: Better formatting of decimals
      - S8204667: Resources not freed on exception
      - S8204874: Update THIRDPARYREADME file
      - S8205361: Better RIFF reading support
      - S8205491: adjust reflective access checks
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181/corba repo
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181/hotspot repo
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxp repo
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181/jaxws repo
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181/jdk repo
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181/langtools repo
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181/nashorn repo
      - S8206916: Remove jdk8u181-b31 tag from jdk8u181 repo
      - S8207336: Build failure in JDK8u on Windows after fix 8207260
      - S8207838, PR3666: AArch64: Float registers incorrectly restored in JNI
call
      - S8208350: Disable all DES cipher suites
      - S8208353: Upgrade JDK 8u to libpng 1.6.35
      - S8208660: JDK 8u191 l10n resource file update
      - S8208754: The fix for JDK-8194534 needs updates
      - S8209415, PR3666: Fix JVMTI test failure HS202
      - S8210431: Complete backport of libpng 1.6.35 TPRM
      - S8211064, PR3666: [AArch64] Interpreter and c1 don't correctly handle
jboolean results in native calls
      - S8211107: LDAPS communication failure with jdk 1.8.0_181
      - S8211731: Reconsider default option for ClassPathURLCheck change done
in JDK-8195874

    ChangeLog:

    2018-12-19  Andrew John Hughes  <gnu_andrew at member.fsf.org>

        Bump to icedtea-3.10.0.
        * Makefile.am:
        (CORBA_CHANGESET): Update to icedtea-3.10.0 tag.
        (JAXP_CHANGESET): Likewise.
        (JAXWS_CHANGESET): Likewise.
        (JDK_CHANGESET): Likewise.
        (LANGTOOLS_CHANGESET): Likewise.
        (OPENJDK_CHANGESET): Likewise.
        (NASHORN_CHANGESET): Likewise.
        (CORBA_SHA256SUM): Likewise.
        (JAXP_SHA256SUM): Likewise.
        (JAXWS_SHA256SUM): Likewise.
        (JDK_SHA256SUM): Likewise.
        (LANGTOOLS_SHA256SUM): Likewise.
        (OPENJDK_SHA256SUM): Likewise.
        (NASHORN_SHA256SUM): Likewise.
        * NEWS: Updated.
        * acinclude.m4,
        (IT_DETERMINE_VERSION): Update JDK_UPDATE_VERSION
        to 191 and BUILD_VERSION to b12.
        * configure.ac: Bump to 3.10.0.
        * hotspot.map.in: Update to icedtea-3.10.0 tag.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openjdk.java.net/pipermail/distro-pkg-dev/attachments/20181225/fc276b60/attachment-0001.html>