[7u12] Request for approval for CR 7201205 - Add Makefile configuration option to build with unlimited crypto in OpenJDK

Edvard Wendelin edvard.wendelin at oracle.com
Tue Oct 30 22:12:21 PDT 2012


Approved.

On Oct 30, 2012, at 11:21 PM, Brad Wetmore <bradford.wetmore at oracle.com> wrote:

> Codereview approved.  It's a direct backport of the JDK8 code.
> 
> Brad
> 
> 
> On 10/30/2012 1:59 PM, Andrew Hughes wrote:
>> Bug: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=7201205
>> OpenJDK8 changeset: http://hg.openjdk.java.net/jdk8/jdk8/jdk/rev/9e879c0288c2
>> Review thread for 8: http://mail.openjdk.java.net/pipermail/security-dev/2012-September/005569.html
>> 
>> This patch allows OpenJDK builds to use the unlimited policy if UNLIMITED_CRYPTO is set.
>> If UNLIMITED_CRYPTO is not set, the build remains the same as before.
>> 
>> This patch obsoletes the more extensive crypto patch carried by IcedTea6&7 which removed
>> several classes in order to remove the need to have policy files at all.  This patch is
>> essentially a compromise between that, which obviously couldn't go upstream, and the need
>> to ship without cryptography restrictions on GNU/Linux distributions.
>> 
>> The changeset from 8 applies cleanly to 7u.
>> Webrev: http://cr.openjdk.java.net/~andrew/7201205/webrev.01/
>> 




More information about the jdk7u-dev mailing list