JGSS Enhancements (contribution by Two Sigma Open Source)

Wed Oct 3 21:30:57 UTC 2018

On Wed, Oct 03, 2018 at 08:49:28PM +0000, Nico Williams wrote:
> I'll attempt to attach all 25 commits now.  I hope the list will accept
> them.  I will post them (and webrev) to cr.openjdk.java.net.

And... I forgot to attach them.  Let's try again.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-missing-dbgsysGetLastErrorString.patch
Type: text/x-diff
Size: 1890 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0001-Add-missing-dbgsysGetLastErrorString.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-JGSS-Fix-cut-paste-error-in-NativeUtil.c.patch
Type: text/x-diff
Size: 968 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0002-JGSS-Fix-cut-paste-error-in-NativeUtil.c.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-Fix-error-handling-in-GSSLibStub.patch
Type: text/x-diff
Size: 23762 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0003-Fix-error-handling-in-GSSLibStub.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-Implement-String-to-gss_buffer_t-import.patch
Type: text/x-diff
Size: 5380 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0004-Implement-String-to-gss_buffer_t-import.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0005-Revert-initGSSBuffer-to-JDK7-non-copy-behaviour.patch
Type: text/x-diff
Size: 13403 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0005-Revert-initGSSBuffer-to-JDK7-non-copy-behaviour.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0006-Fix-loss-of-GSS_S_FAILURE-major-status-in-importCont.patch
Type: text/x-diff
Size: 1054 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0006-Fix-loss-of-GSS_S_FAILURE-major-status-in-importCont.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0007-Add-actual-mechanism-to-native-GSSNameElement-state.patch
Type: text/x-diff
Size: 10862 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0007-Add-actual-mechanism-to-native-GSSNameElement-state.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0008-Add-getLocalName-GSSName-method.patch
Type: text/x-diff
Size: 13926 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0008-Add-getLocalName-GSSName-method.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0009-Add-createCredential-with-password.patch
Type: text/x-diff
Size: 39219 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0009-Add-createCredential-with-password.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0010-JGSS-Don-t-dispose-of-creds-too-eagerly.patch
Type: text/x-diff
Size: 4369 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0010-JGSS-Don-t-dispose-of-creds-too-eagerly.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0011-Fix-SpNego-multi-round-trip-bug.patch
Type: text/x-diff
Size: 6126 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0011-Fix-SpNego-multi-round-trip-bug.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0012-JGSS-Add-comment-about-unnec.-perm-check.patch
Type: text/x-diff
Size: 1307 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0012-JGSS-Add-comment-about-unnec.-perm-check.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0013-ServicePermission-empty-realm-support.patch
Type: text/x-diff
Size: 3015 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0013-ServicePermission-empty-realm-support.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0014-Add-isDefaultCredential-method-to-GSSCredentialSpi.patch
Type: text/x-diff
Size: 10063 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0014-Add-isDefaultCredential-method-to-GSSCredentialSpi.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0015-JGSS-Prefer-default-cred-handles-if-possible.patch
Type: text/x-diff
Size: 4473 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0015-JGSS-Prefer-default-cred-handles-if-possible.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0016-Make-GSSName-implement-Principal-add-getName.patch
Type: text/x-diff
Size: 5244 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0016-Make-GSSName-implement-Principal-add-getName.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0017-Add-GssLoginModule.patch
Type: text/x-diff
Size: 25473 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0017-Add-GssLoginModule.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0018-Engage-GssLoginModule-only-when-native-true.patch
Type: text/x-diff
Size: 10619 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0018-Engage-GssLoginModule-only-when-native-true.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0019-Krb5LoginModule-cleanup.patch
Type: text/x-diff
Size: 26717 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0019-Krb5LoginModule-cleanup.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0020-fixup-SEAM-bug-uncomments.patch
Type: text/x-diff
Size: 2146 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0020-fixup-SEAM-bug-uncomments.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0021-Fix-leak-in-exception-cases-in-getJavaOID.patch
Type: text/x-diff
Size: 1563 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0021-Fix-leak-in-exception-cases-in-getJavaOID.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0022-FIXME-commentary.patch
Type: text/x-diff
Size: 3914 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0022-FIXME-commentary.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0023-Add-commentary-about-permissions-checks.patch
Type: text/x-diff
Size: 2380 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0023-Add-commentary-about-permissions-checks.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0024-JGSS-Simplify-context-permissions-checks.patch
Type: text/x-diff
Size: 7126 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0024-JGSS-Simplify-context-permissions-checks.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0025-Dispose-of-delegated-cred-handles-early.patch
Type: text/x-diff
Size: 2377 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20181003/5bea043c/0025-Dispose-of-delegated-cred-handles-early.patch>