On 8038089: TLS optional support for Kerberos cipher suites needs to be re-examine

Wang Weijun weijun.wang at oracle.com
Thu Jul 17 06:09:54 UTC 2014


Where is the beast place to define this ServiceLoader interface? If not public, how do I "export" it so that java.security.jgss knows it?

Thanks
Max

On Jul 17, 2014, at 12:35, Xuelei Fan <xuelei.fan at oracle.com> wrote:

>> ExternalCipherSuite is the service interface and Krb5CipherSuite implements it. It's a modification of the old Krb5Proxy but I've moved as many as Kerberos-related codes to the implementation side so it has less methods now.
>> 
>> Most likely we will define this new interface in a public package.
>> 
> If krb5 is the only external implementation of TLS cipher suites, I
> think, we may want to try the best not to define public interface if
> possible.




More information about the security-dev mailing list