RFR: 8349546: Linux support for Kerberos "nativeccache" functionality [v10]
Nick Hall
duke at openjdk.org
Wed Nov 12 11:42:06 UTC 2025
On Wed, 12 Nov 2025 01:36:19 GMT, Shawn M Emery <duke at openjdk.org> wrote:
>> Nick Hall has updated the pull request incrementally with one additional commit since the last revision:
>>
>> Address second set of @erikj79's build comments
>
> make/test/JtregNativeJdk.gmk line 126:
>
>> 124: # macOS: build with system krb5 and disable deprecation warnings
>> 125: BUILD_JDK_JTREG_LIBRARIES_LDFLAGS_libNativeCredentialCacheHelper := -lkrb5 -lcom_err
>> 126: BUILD_JDK_JTREG_LIBRARIES_CFLAGS_libNativeCredentialCacheHelper := -Wno-deprecated-declarations
>
> Why doesn't the macosx target use the KRB5* variables as well?
Only because I was trying to avoid making changes there, but you're right - the resultant value of this on MacOS would be the hard-coded set of libs there, so there's no harm in using at (and potentially some advantage to people building on MacOS against a non-system version of Kerberos). Fixed in next commit.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/28075#discussion_r2517970400
More information about the security-dev
mailing list