RFR 8200468: Port the native GSS-API bridge to Windows

Weijun Wang weijun.wang at oracle.com
Fri Apr 13 01:11:18 UTC 2018



> On Apr 13, 2018, at 9:09 AM, Valerie Peng <valerie.peng at oracle.com> wrote:
> 
> Hi Max,
> 
> Changes look fine, just some very minor nit: Maybe it's better to remove the unused variables which currently are only commented out (GSSLibStub.c and
> NativeUtil.c).

Sure.

> When testing, did u enable debugging? If not, maybe worthwhile to try it out to make sure things work as expected.

Yes I enabled it once or twice. I will try again on all sides.

Thanks
Max

> 
> Thanks,
> Valerie
> 
> On 4/11/2018 9:50 PM, Weijun Wang wrote:
>> Hi Valerie
>> 
>> I updated the webrev at
>> 
>>   http://cr.openjdk.java.net/~weijun/8200468/webrev.01/
>> 
>> The only change is that I prepend "GSS_DLLIMP" to all gss_* functions in gssapi.h. The file has the following lines
>> 
>>  283 #if defined (_WIN32) && defined (_MSC_VER)
>>  284 # ifdef GSS_DLL_FILE
>>  285 #  define GSS_DLLIMP __declspec(dllexport)
>>  286 # else
>>  287 #  define GSS_DLLIMP __declspec(dllimport)
>>  288 # endif
>>  289 #else
>>  290 # define GSS_DLLIMP
>>  291 #endif
>> 
>> I added it so the exact same header file can be used to write a native GSS-API library which would export these functions.
>> 
>> Is this OK? Tests run fine with both MIT krb5 and Heimdal libraries.
>> 
>> Thanks
>> Max
>> 
>> 
>>> On Apr 4, 2018, at 10:19 AM, Weijun Wang <weijun.wang at oracle.com> wrote:
>>> 
>>> Hi All
>>> 
>>> Please take a review at
>>> 
>>>  http://cr.openjdk.java.net/~weijun/8200468/webrev.00/
>>> 
>>> Like in *nix, native GSS-API bridge is turned on by setting -Dsun.security.jgss.native=true. Please note there is no default native GSS-API library on Windows and you need to supply your own, like this:
>>> 
>>> java -Dsun.security.jgss.native=true -Dsun.security.jgss.lib=/path/to/gssapi64.dll App ...
>>> 
>>> You can manually test the change with
>>> 
>>> jtreg -Dnative.krb5.libs=j=,n=/path/to/gssapi64.dll test/jdk/sun/security/krb5/auto/BasicProc.java
>>> 
>>> Thanks
>>> Max
>>> 
>>> p.s. You can get a gssapi64.dll from https://web.mit.edu/KERBEROS/kfw-4.1/kfw-4.1.html.
> 




More information about the security-dev mailing list