[11.0.9u] Open P2 bug 8250787 Provider.put no longer registering aliases in FIPS env

[Lindenmaier, Goetz]

Hi,

Paul, any progress on this?

Can anybody rate the risk of not fixing this bug?
Can anybody reproduce the bug?

7092821 that introduced this problem is only a performance
optimization. If we cannot find a solution for 8250787,
should we backout 7092821 from 11.0.9?

Unfortunately, backing out the change does not
apply clean, because, e.g.,  8246613 reverted parts
of it.

Best regards,
  Goetz.

From: Hohensee, Paul <hohensee at amazon.com>
Sent: Monday, August 31, 2020 6:43 PM
To: Lindenmaier, Goetz <goetz.lindenmaier at sap.com>; jdk-updates-dev at openjdk.java.net
Subject: RE: [11u] Input on 8250787 Provider.put no longer registering aliases in FIPS env

We’ll take a look.

Thanks,
Paul

From: "Lindenmaier, Goetz" <goetz.lindenmaier at sap.com<mailto:goetz.lindenmaier at sap.com>>
Date: Monday, August 31, 2020 at 7:55 AM
To: "jdk-updates-dev at openjdk.java.net<mailto:jdk-updates-dev at openjdk.java.net>" <jdk-updates-dev at openjdk.java.net<mailto:jdk-updates-dev at openjdk.java.net>>, "Hohensee, Paul" <hohensee at amazon.com<mailto:hohensee at amazon.com>>
Subject: [11u] Input on 8250787 Provider.put no longer registering aliases in FIPS env

Hi,

I had a look at
8250787 Provider.put no longer registering aliases in FIPS env
https://bugs.openjdk.java.net/browse/JDK-8250787

This is the last relevant open 11.0.9-oracle change in 11u.
Oracle rates it P2.
Unfortunately, no patch to downport exists. It is fixed only in 11
and 8 by Oracle.

Apparently the problem was introduced by
1.       7092821<https://bugs.openjdk.java.net/browse/JDK-7092821>: java.security.Provider.getService() is synchronized and became scalability bottleneck
2.       https://bugs.openjdk.java.net/browse/JDK-7092821
which was downported to 11.0.7.  Paul, do you maybe have an idea how to fix this?

Best regards,
  Goetz.