[8u40] request for approval for two changes to sunpkcs11-solaris.cfg - 8037745 - 8041142

[Anthony Scarpino]

There are s10 patches available which I can add to JBS.  Adding them to 
the release notes is a good idea to be safe.  The first one, which has 
been out for over a year, is probably more likely to be seen.  The 
latter one was only see via code inspection and never encountered in the 
wild.

Tony

On 08/20/2014 12:44 AM, Seán Coffey wrote:
> Tony,
>
> what happens if these mechanisms are enabled on an unpatched Solaris 10
> system ? We don't want users to encounter regression on upgrade to 8u40.
> Should we get this info added to 8u40 release notes ? i.e relevant patch
> numbers
>
> regards,
> Sean.
>
> On 19/08/2014 22:58, Anthony Scarpino wrote:
>> Hi,
>>
>> I requesting the backport of two config file changes that were pushed
>> into jdk9.  The changes to jdk8u are identical.
>>
>> 8037745: Consider re-enabling PKCS11 mechanisms previously disabled
>> due to Solaris bug 7050617
>>
>> bug:
>>   https://bugs.openjdk.java.net/browse/JDK-8037745
>> changeset:
>>   http://hg.openjdk.java.net/jdk9/dev/jdk/rev/50e6d06f5cb6
>> jdk9 review:
>> http://mail.openjdk.java.net/pipermail/security-dev/2014-May/010494.html
>>
>>
>> 8041142: Re-enabling CBC_PAD PKCS11 mechanisms for Solaris
>> bug:
>>   https://bugs.openjdk.java.net/browse/JDK-8041142
>> changeset:
>>   http://hg.openjdk.java.net/jdk9/dev/jdk/rev/259d5726632f
>> jdk9 review:
>> http://mail.openjdk.java.net/pipermail/security-dev/2014-June/010585.html
>>
>> thanks
>>
>> Tony
>>
>