[security-dev 01547]: Re: PING: [PATCH FOR REVIEW]: 6763530: Fix breakage of NSS-based Elliptic Curve Cryptography in OpenJDK6

[Andrew John Hughes]

On 28 June 2010 01:05, Michael StJohns <mstjohns at comcast.net> wrote:
> Hi Andrew -
>
> I really need to work on fleshing out my emails... :-/
>
> The _20 release of the normal (non-OpenJDK) is missing this update.  I had thought that this fix was supposed to be back-ported to the closed JDK 6 release.  I've got the OpenJDK built on my local machine, but the folks I'm working with would rather use the pre-packaged Windows version etc etc etc... *sigh*.
>

By its very nature, we don't know what's in the proprietary JDK.
That's an issue you need to take up with Oracle.  The bug is fixed in
OpenJDK6 and 7.

> Thanks - Mike
>
>
> At 07:17 PM 6/27/2010, Andrew John Hughes wrote:
>>> At 05:37 PM 6/27/2010, Michael StJohns wrote:
>>>>Hi guys -
>>>>
>>>>I see from the Mercurial logs that this went in to both the jdk6 and jdk7 repositories. Â For jdk6 - it's rev 302 which looks like this should have ended up in the _19 release
>>>>
>>>>But all the files in lib/ext/sunpkcs11.jar  for _20 are all tagged as 1 September 2009....
>>>>
>>>>Is the sunpkcs11.jar provider not getting regenerated and rebundled during the release process?
>>>>
>>>>Mike
>>
>>It has been:
>>
>>$ hg log -R jdk -k 6763530
>>changeset:   302:82b80660cac3
>>user:        vinnie
>>date:        Thu Jan 21 23:59:41 2010 +0000
>>summary:     6763530: Cannot decode PublicKey (Proider SunPKCS11,
>>curve prime256v1)
>>
>>and certainly is present on IcedTea6's builds.
>>--
>>Andrew :-)
>>
>>Free Java Software Engineer
>>Red Hat, Inc. (http://www.redhat.com)
>>
>>Support Free Java!
>>Contribute to GNU Classpath and the OpenJDK
>>http://www.gnu.org/software/classpath
>>http://openjdk.java.net
>>
>>PGP Key: 94EFD9D8 (http://subkeys.pgp.net)
>>Fingerprint: F8EF F1EA 401E 2E60 15FA  7927 142C 2591 94EF D9D8
>
>
>



-- 
Andrew :-)

Free Java Software Engineer
Red Hat, Inc. (http://www.redhat.com)

Support Free Java!
Contribute to GNU Classpath and the OpenJDK
http://www.gnu.org/software/classpath
http://openjdk.java.net

PGP Key: 94EFD9D8 (http://subkeys.pgp.net)
Fingerprint: F8EF F1EA 401E 2E60 15FA  7927 142C 2591 94EF D9D8