RFR 6722928: Support SSPI as a native GSS-API provider
Nico Williams
Nico.Williams at twosigma.com
Thu Nov 29 16:44:56 UTC 2018
On Thu, Nov 29, 2018 at 10:00:02AM +0800, Weijun Wang wrote:
> > - If you can get Legal approval for including / distributing a fork of
> > Martin Rex's bridge, you'll get all of the above functionality and
> > also acceptor functionality.
>
> Anyway, one can use his bridge with -Dsun.security.jgss.lib.
Oh, speaking of this, we wanted to be able to use the registry for this
so our users don't have to specify the -Dsun.security.jgss.lib on the
command-line. The JDK does have a generic interface to the registry,
the Preferences interface and its implementations, but because some
implementations have support for remote stores, it depends on all of
security/ being built first, which means I couldn't use it :/
There are places where there is native C/C++ code to use the registry
because of this, and I thought of copying that pattern. But I never got
around to doing that.
It'd be nice if Preferences, or a cut-down version for private in-JDK
use, supported access to local prefs from security components of the
JDK. I'm not entirely sure how to make that happen, but it would be a
good project for someone, I'm sure :)
Nico
--
More information about the security-dev
mailing list