Trusted service?

Wang Weijun weijun.wang at oracle.com
Thu Aug 14 08:29:54 UTC 2014


On Aug 14, 2014, at 16:03, Alan Bateman <Alan.Bateman at oracle.com> wrote:
> 
>> Or writing the class name in a services file automatically exports it as a service?
>> 
>> Now my preferred order will be
>> 
>>    if (loadProviderFromProperty())
>>        return provider;
>>    if (loadProviderAsInstalledService())
>>        return provider;
>>    if (loadProviderAsService())
>>        return provider;
>> 
> Looking at JDK-8038089 again then I'm not sure why loadProviderFromProperty is here. If you are limiting this to just implementations of the Kerberos cipher suites and you only want to use service providers that are in the JDK image then ServiceLoader.loadInstalled should be sufficient.

That's just a general preferred order. Here I define no property and do not expect an application providing an impl so yes loadProviderAsInstalledService is enough.

--Max

> 
> -Alan




More information about the security-dev mailing list