RFR 8130302: jarsigner and keytool -providerClass needs be re-examined for modules

Wang Weijun weijun.wang at oracle.com
Fri Feb 26 08:46:25 UTC 2016


> On Feb 26, 2016, at 1:03 AM, Sean Mullan <sean.mullan at oracle.com> wrote:
> 
> On 02/18/2016 03:10 AM, Weijun Wang wrote:
>> There is another compatibility issue which is more important:
>> 
>> Today, we tell users to load their own PKCS11 provider with
>> 
>>   -providerClass sun.security.pkcs11.SunPKCS11 -providerArg some.cfg
>> 
>> and seems the new options should be
>> 
>>   -provider SunPKCS11 -providerArg some.cfg
> 
> I thought I had opened a docs bug for that, but I can't find it now. So I will add a comment to https://bugs.openjdk.java.net/browse/JDK-8075902 that it should also be updated as part of that bug.

Strange I cannot open bugs.openjdk.java.net now.

I am planning to make it compatible in the delta-patch for jake:

     public static void loadProviderByClass(
             String provClass, String arg, ClassLoader cl) {
         Provider prov;
+        if (provClass.equals("sun.security.pkcs11.SunPKCS11")) {
+            // For compatibility, SunPKCS11 is loadable with -providerClass.
+            loadProviderByName("SunPKCS11", arg);
+            return;
+        }
         .... loading class ....

Mandy suggested we only support this single class.

--Max

> 
> --Sean




More information about the security-dev mailing list