[JDK-8195794]: sunrsasign.jar still searched in java 8?

Bradford Wetmore bradford.wetmore at oracle.com
Fri Jan 19 22:25:28 UTC 2018



On 1/19/2018 1:59 PM, Bernd Eckenfels wrote:

> I can try to propose a patch to hotspot-dev and find a sponsor, I just 
> wont have good means to run Tests.

If you get an Oracle sponsor, (s)he should be able to put it through the 
regular hot-spot integration tests they have.

> The lib/classes/ is also a interesting find on the boot classpath 😊

It's been a while since I've been working on a JDK 8 build, but I think 
lib/classes is the default location for classes in non-image builds.

Brad


> Gruss
> 
> Bernd
> 
> -- 
> http://bernd.eckenfels.net
> 
> *Von: *Bradford Wetmore <mailto:bradford.wetmore at oracle.com>
> *Gesendet: *Freitag, 19. Januar 2018 22:21
> *An: *Bernd <mailto:ecki at zusammenkunft.net>; 
> security-dev at openjdk.java.net <mailto:security-dev at openjdk.java.net>
> *Betreff: *Re: sunrsasign.jar still searched in java 8?
> 
> Hrm...this was (supposedly) fixed/removed on 2003-10-20 for JDK 5...but
> 
> I can't find anything in the old SCCS workspace history to indicate it
> 
> was (old bug id is nowhere to be found).  It's been there ever since we
> 
> migrated to Mercurial.
> 
> Anyway, it's gone in JDK 9 as a result of the modularity code changes.
> 
> I've filed:
> 
>       https://bugs.openjdk.java.net/browse/JDK-8195794
> 
> Other than a bit of search overhead, I don't think it should cause a
> 
> problem.  This will be a pretty low bug priority bug for sustaining to
> 
> fix, unless there is something I'm not catching.
> 
> If someone is looking for a simple bug to learn the process of how to
> 
> contribute to OpenJDK 8, this is a good candidate.  That someone should
> 
> probably followup with hotspot-dev [1], as this is their code.
> 
> Brad
> 
> [1]  http://mail.openjdk.java.net/mailman/listinfo/hotspot-dev
> 
> On 1/19/2018 10:28 AM, Bernd wrote:
> 
>  > Hello,
> 
>  >
> 
>  > I noticed that when I strace a "java -version" with 8u152 JRE it
> 
>  > searches for sunrsasign.jar which is not found. Is that a compatibility
> 
>  > thing or should it not happen?
> 
>  >
> 
>  > It seems to be in the boot classpath even when the associated classes
> 
>  > are in rt.jar:
> 
>  >
> 
>  > 
> http://hg.openjdk.java.net/jdk8u/jdk8u/hotspot/file/tip/src/share/vm/runtime/os.cpp#l1197
> 
>  >
> 
>  > Gruss
> 
>  > Bernd
> 
>  >
> 



More information about the security-dev mailing list