RFR 6722928: Support SSPI as a native GSS-API provider

Nico Williams Nico.Williams at twosigma.com
Mon Dec 3 17:14:12 UTC 2018


On Sun, Dec 02, 2018 at 07:58:38PM +0800, Weijun Wang wrote:
> > On Dec 1, 2018, at 12:37 AM, Nico Williams <Nico.Williams at twosigma.com> wrote:
> > 
> > I don't see where that allows something like this property to be set via
> > some configuration file in /etc or via the registry on Windows.
> 
> conf/security/java.security is our supported place for these per-installation
> settings. It's not perfect because reinstalll JDK will wipe it. Maybe you can
> create your own launcher wrapper to read settings from /etc or registry first
> and then translate them into system properties before starting the JVM.

Well... I'm not going to have time to do anything here, but if I did I'd look
into moving parts of Preferences into security.  That would work well enough
for the Registry (since that has no dependencies on security), but it wouldn't
work for XML without some serious refactoring to allow an XML that supports
only local (file:) URIs in security -- that seems way too ambitious for a
project I'm not funded to work on.  These are suggestions for Oracle or any
other contributor who needs this.

Nico
-- 



More information about the security-dev mailing list