[PATCH FOR REVIEW] Allow OpenJDK to be built with the unlimited crypto policy
Brad Wetmore
bradford.wetmore at oracle.com
Thu Sep 27 18:42:45 UTC 2012
On 9/27/2012 9:50 AM, Andrew Hughes wrote:
> ----- Original Message -----
>>
>>>> Will you be putting this back yourself? If so let me know when
>>>> you
>>>> go
>>>> in, and I can update the bug once you're in.
>>>>
>>>
>>> I will, though I'll need a bug ID for it. I presume tl is ok as
>>> the
>>> forest to use?
>>
>> This going into 8? Then yes.
>>
>
> At first, yes. Do you have any objections to me proposing it for 7u too, in due course?
None here, other than needing a separate code review.
Brad
>> 7201205: Add Makefile configuration option to build with unlimited
>> crypto in OpenJDK.
>>
>
> Great, thanks! I'll push it.
>> Brad
>>
>>
>>
>>>> Mark wrote:
>>>> > The summary is that it was just easier to remove unused
>>>> > classes
>>>> > that
>>>> > made the code tricky to understand for no good reason except
>>>> > for
>>>> > some
>>>> > secret proprietary code.
>>>>
>>>> Unfortunately, Oracle and some of our commercial (non-OpenJDK)
>>>> licensees
>>>> still depend on that tricky code. :( I'd personally love to
>>>> strip
>>>> it
>>>> all out, but we have to balance all of its consumers (Oracle SE
>>>> and
>>>> ME,
>>>> commercial source/binary licensees, OpenJDK, etc.)
>>>>
>>>> Andrew wrote:
>>>> > I'm sure it would be easy enough to dump those classes if
>>>> > Oracle
>>>> > started producing OpenJDK binaries licensed under the GPL,
>>>> > rather
>>>> > than binaries from their proprietary fork.
>>>>
>>>> Unfortunately, not likely in our current export/import climate.
>>>>
>>>
>>> Yes, this is what I thought. We just have to make sure to test
>>> well
>>> before shipping binaries.
>>>
>>>> Brad
>>>>
>>>>
>>>
>>
>
More information about the security-dev
mailing list