<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Brad,<br>
<br>
Can you please review the fixes for the following 2 bugs:<br>
<ul>
<li>7146728: Inconsistent length for the generated secret using DH
key agreement impl from SunJCE and PKCS11</li>
<ul>
<li><a class="moz-txt-link-freetext" href="http://cr.openjdk.java.net/~valeriep/7146728/webrev.00/">http://cr.openjdk.java.net/~valeriep/7146728/webrev.00/</a></li>
</ul>
</ul>
<blockquote>
<blockquote>This impacts both SunJCE provider and SunPKCS11
provider. The implementations are inconsistent within SunJCE
provider itself between the engineGenerateSecret() and
engineGenerateSecret(byte[], int). Given that RFC 2631 specifies
the leading 0s must be preserved so the generated secret has as
many octets as the prime P, I have changed both SunJCE and
SunPKCS11 provider to do so. When testing against Solaris and
NSS libraries, Solaris preserves the leading 0s while NSS trims
it off, thus similar handling is also needed in SunPKCS11
provider.<br>
</blockquote>
</blockquote>
<ul>
<li>7130959: Tweak 7058133 fix for JDK 8 (javah makefile changes)</li>
<ul>
<li><a class="moz-txt-link-freetext" href="http://cr.openjdk.java.net/~valeriep/7130959/webrev.00/">http://cr.openjdk.java.net/~valeriep/7130959/webrev.00/</a><br>
</li>
</ul>
</ul>
<blockquote>
<blockquote>Instead of using the -Xbootclasspath, switching over
to use -boothclasspath for consistency with the backported
changes in the update releases for earlier JDK, e.g. 7u.<br>
</blockquote>
</blockquote>
Thanks,<br>
Valerie<br>
<blockquote>
<blockquote><br>
</blockquote>
</blockquote>
</body>
</html>