[13] RFR JDK-8220016 "SunRsaSignEntries were mistakenly added to the SunJSSE provider"

[Valerie Peng]

Do you mean removing the part about SunRsaSignEntries completely? Or 
only remove the MD2/MD5withRSA signature algorithms?

Do you know the history of including them in the first place? Since 
SunRsaSign provider has been in early JDK releases, I wonder why SunJSSE 
provider duplicated these RSA algorithms in the first place? I can file 
a CSR, knowing the history/reason would help.

Thanks,

Valerie


On 3/7/2019 5:45 PM, Xuelei Fan wrote:
> Hi Valerie,
>
> As you are already there, I may suggest to remove the old RSA crypto 
> algorithms in the SunJSSE providers as well.  As may simplify the code 
> a little bit, though a CSR is needed for the SunJSSE behavior change.
>
> Thanks,
> Xuelei
>
> On 3/7/2019 4:56 PM, Valerie Peng wrote:
>> Hi Brad,
>>
>> Do you have time to help review the changes for JDK-8220016? Current 
>> changes are to register the same list of RSA-related services as 
>> these prior to the fix for JDK-7092821. I am not sure what are the 
>> old RSA impls for pre-JDK1.4 implementations. Otherwise, I can remove 
>> them as well. Please let me know.
>>
>> Bug: https://bugs.openjdk.java.net/browse/JDK-8220016
>>
>> Webrev: http://cr.openjdk.java.net/~valeriep/8220016/webrev.00/
>>
>> Thanks,
>> Valerie