RFR: 8259319: Illegal package access when SunPKCS11 requires SunJCE's classes

Valerie Peng valeriep at openjdk.java.net
Fri Jan 8 19:42:04 UTC 2021


On Wed, 6 Jan 2021 15:33:59 GMT, Martin Balao <mbalao at openjdk.org> wrote:

> As described in JDK-8259319 [1], this fix proposal is to set proper access permissions so the SunPKCS11 provider can create instances of SunJCE classes when a Security Manager is installed and the fallback scheme is used.
> 
> No regressions found in jdk/sun/security/pkcs11 tests category.
> 
> --
> [1] - https://bugs.openjdk.java.net/browse/JDK-8259319

src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Util.java line 102:

> 100:                         }
> 101:                     }
> 102:                 });

Sean's suggestion is to add additional arguments here, e.g. null, new RuntimePermission("accessClassInPackage." + <pkgName>).

-------------

PR: https://git.openjdk.java.net/jdk/pull/1961



More information about the security-dev mailing list