[9] RFR: 8073430: Deprecate security APIs that have been superseded

Jason Uh jason.uh at oracle.com
Wed Mar 4 19:02:07 UTC 2015


webrev: http://cr.openjdk.java.net/~juh/8073430/00/
jbs: https://bugs.openjdk.java.net/browse/JDK-8073430

Please review this change, which deprecates the classes in 
java.security.acl and javax.security.cert. These packages have been 
superseded by replacements for a long time.

For java.security.acl, there have been replacement APIs available since 
JDK 1.2 in java.security.Policy and related classes. For 
javax.security.cert, replacements have existed in java.security.cert 
since JDK 1.4. These replacements have been noted in the javadocs, so 
applications using these old APIs have had plenty of time to migrate.

Two methods

   HandshakeCompletedEvent.getPeerCertificateChain
   SSLSession.getPeerCertificateChain

that return the javax.security.cert.X509Certificate type will also be 
deprecated.

The change also includes deprecation warning suppression in a few areas, 
including sun.net.www.protocol.https.

Thanks,
Jason


More information about the net-dev mailing list