[8u40] request for approval for two changes to sunpkcs11-solaris.cfg - 8037745 - 8041142

[Seán Coffey]

Thanks for the info Tony. Yes - we need to make sure this info is 
documented in the release notes.

Approved.
regards,
Sean.

On 20/08/14 18:15, Anthony Scarpino wrote:
> There are s10 patches available which I can add to JBS.  Adding them 
> to the release notes is a good idea to be safe.  The first one, which 
> has been out for over a year, is probably more likely to be seen. The 
> latter one was only see via code inspection and never encountered in 
> the wild.
>
> Tony
>
> On 08/20/2014 12:44 AM, Seán Coffey wrote:
>> Tony,
>>
>> what happens if these mechanisms are enabled on an unpatched Solaris 10
>> system ? We don't want users to encounter regression on upgrade to 8u40.
>> Should we get this info added to 8u40 release notes ? i.e relevant patch
>> numbers
>>
>> regards,
>> Sean.
>>
>> On 19/08/2014 22:58, Anthony Scarpino wrote:
>>> Hi,
>>>
>>> I requesting the backport of two config file changes that were pushed
>>> into jdk9.  The changes to jdk8u are identical.
>>>
>>> 8037745: Consider re-enabling PKCS11 mechanisms previously disabled
>>> due to Solaris bug 7050617
>>>
>>> bug:
>>>   https://bugs.openjdk.java.net/browse/JDK-8037745
>>> changeset:
>>>   http://hg.openjdk.java.net/jdk9/dev/jdk/rev/50e6d06f5cb6
>>> jdk9 review:
>>> http://mail.openjdk.java.net/pipermail/security-dev/2014-May/010494.html 
>>>
>>>
>>>
>>> 8041142: Re-enabling CBC_PAD PKCS11 mechanisms for Solaris
>>> bug:
>>>   https://bugs.openjdk.java.net/browse/JDK-8041142
>>> changeset:
>>>   http://hg.openjdk.java.net/jdk9/dev/jdk/rev/259d5726632f
>>> jdk9 review:
>>> http://mail.openjdk.java.net/pipermail/security-dev/2014-June/010585.html 
>>>
>>>
>>> thanks
>>>
>>> Tony
>>>
>>
>