[9] RFR 8056026 Debug security logging should print Provider used for each crypto operation

Sean Mullan sean.mullan at oracle.com
Mon Sep 15 15:12:57 UTC 2014


Can you also add similar log messages for MessageDigest, SecureRandom, 
and KeyStore?

Otherwise looks good. Please add a noreg label. Also the fix is helpful 
to any platform and not just solaris/sparc so you should change those 
fields to be generic.

--Sean

On 09/12/2014 11:11 AM, Vincent Ryan wrote:
>
> Please review this change to display the JCE provider that has been
> selected for common crypto operations.
> This aids troubleshooting crypto applications when a given crypto
> algorithm is supported by several JCE providers.
> Some crypto operations delay selecting a provider until they examine the
> key supplied in the init() method.
> This fix also accommodates that behaviour.
>
> The following crypto operations are supported: Cipher, KeyAgreement,
> KeyGenerator, KeyPairGenerator, Mac and Signature.
> To see these new messages, activate JCE provider debugging as normal.
> For example,
>
> % java -Djava.security.debug=provider MySSLClientApp
>   :
> Provider: Signature.SHA256withRSA verification from: SunRsaSign
> Provider: Signature.SHA256withRSA verification from: SunRsaSign
> Provider: Signature.SHA256withRSA verification from: SunRsaSign
> Provider: Signature.SHA1withDSA verification from: SunPKCS11-Solaris
> Provider: Signature.SHA1withDSA verification from: SunPKCS11-Solaris
> Provider: Signature.MD5withRSA verification from: SunPKCS11-Solaris
> Provider: Signature.MD5withRSA verification from: SunPKCS11-Solaris
> Provider: Signature.SHA256withRSA verification from: SunRsaSign
> Provider: Signature.SHA256withRSA verification from: SunRsaSign
> Provider: KeyPairGenerator.EC from: SunPKCS11-Solaris
> Provider: Signature.SHA256withRSA verification from: SunRsaSign
> Provider: Signature.SHA256withRSA verification from: SunRsaSign
> Provider: Cipher.AES/GCM/NoPadding encryption from: SunJCE
> Provider: KeyGenerator.SunTls12RsaPremasterSecret from: SunJCE
> Provider: Cipher.RSA/ECB/PKCS1Padding key wrapping from: SunPKCS11-Solaris
> Provider: KeyGenerator.SunTls12MasterSecret from: SunJCE
> Provider: KeyGenerator.SunTls12KeyMaterial from: SunJCE
> Provider: Signature.SHA512withRSA signing from: SunPKCS11-Solaris
> Provider: KeyGenerator.SunTls12Prf from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding encryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding decryption from: SunJCE
> Provider: KeyGenerator.SunTls12Prf from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding encryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding encryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding decryption from: SunJCE
> Provider: KeyGenerator.SunTls12KeyMaterial from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding decryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding decryption from: SunJCE
> Provider: KeyGenerator.SunTls12Prf from: SunJCE
> Provider: KeyGenerator.SunTls12Prf from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding encryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding encryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding decryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding decryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding decryption from: SunJCE
> Provider: Cipher.AES/GCM/NoPadding encryption from: SunJCE
>   :
>
>
> Thanks.
>
> Bug: https://bugs.openjdk.java.net/browse/JDK-8056026
> Webrev: http://cr.openjdk.java.net/~vinnie/8056026/webrev.00/



More information about the security-dev mailing list