[9] RFR 8157489: AppleProvider in java.base/macosx/classes/module-info.java.extra

Valerie Peng valerie.peng at oracle.com
Fri Jun 10 00:26:46 UTC 2016


Webrev updated at: http://cr.openjdk.java.net/~valeriep/8157489/webrev.01

Thanks,
Valerie

On 6/9/2016 4:37 PM, Valerie Peng wrote:
>
> I see. Looks like I misunderstood your earlier comment.
> What you suggested sounds good. I will make modifications accordingly.
> Thanks,
> Valerie
>
> On 6/9/2016 4:31 PM, Mandy Chung wrote:
>>> On Jun 9, 2016, at 4:22 PM, Valerie Peng<valerie.peng at oracle.com>  
>>> wrote:
>>>
>>>
>>> Thanks for the comments. I will update the reg test, i.e. 
>>> test/java/security/Provider/DefaultProviderList.java, to check that 
>>> they are from java.base.
>>>
>> To clarify: what I mean is that you should remove the logic that 
>> skips the built-in security provider if found.  Also for the security 
>> provider, it should check it comes from a module other than java.base.
>>
>>> I don't see a need for built-in security providers to be found 
>>> through ServiceLoader.load(Provider.class) though. The expected API 
>>> usage is to get the provider instance through 
>>> Security.getProvider(String provName).
>> Right that’s implementation details.  I have no issue with that.
>>
>> Mandy
>>
>>> Regards,
>>> Valerie
>>>
>>> On 6/9/2016 3:31 PM, Mandy Chung wrote:
>>>>> On Jun 9, 2016, at 3:22 PM, Valerie 
>>>>> Peng<valerie.peng at oracle.com>   wrote:
>>>>>
>>>>>
>>>>> Anyone can help reviewing this one-line change which removes a 
>>>>> redundant declaration?
>>>>>
>>>>> As Apple provider is instantiated directly (see 
>>>>> sun.security.jca.ProviderConfig.java) and not loaded through 
>>>>> ServiceLoader , we can safely remove the line for ServiceLoader 
>>>>> lookup. No new regression test as this is just a minor performance 
>>>>> fix.
>>>>>
>>>>> Webrev: http://cr.openjdk.java.net/~valeriep/8157489/
>>>> So all builtin security providers in java.base will not be found 
>>>> from ServiceLoader.load(Provider.class).
>>>>
>>>> test/java/security/Provider/DefaultProviderList.java should then be 
>>>> updated to expect all providers are not from java.base and check 
>>>> Class::getModule().  Currently the test simply skips some builtin 
>>>> security providers.
>>>>
>>>> Mandy
>>>>



More information about the security-dev mailing list