<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Following on from the recent JDK-8203629 code review, I'd like to
propose enhancements on how we can record events in security libs.
The introduction of the JFR libraries can give us much better ways
of examining JDK actions. For the initial phase, I'm looking to
enhance some key security library events in JDK 11 so that they
can be either recorded to JFR, logged to a traditional logger, or
both.</p>
<p>Examples of how useful JFR recordings could be can be seen here :
<br>
</p>
<p><a class="moz-txt-link-freetext"
href="http://cr.openjdk.java.net/%7Ecoffeys/event_snaps/X509Event_1.png">http://cr.openjdk.java.net/~coffeys/event_snaps/X509Event_1.png</a>
<br>
<a class="moz-txt-link-freetext"
href="http://cr.openjdk.java.net/%7Ecoffeys/event_snaps/securityProp_1.png">http://cr.openjdk.java.net/~coffeys/event_snaps/securityProp_1.png</a>
<br>
<a class="moz-txt-link-freetext"
href="http://cr.openjdk.java.net/%7Ecoffeys/event_snaps/securityProp_2.png">http://cr.openjdk.java.net/~coffeys/event_snaps/securityProp_2.png</a>
<br>
<a class="moz-txt-link-freetext"
href="http://cr.openjdk.java.net/%7Ecoffeys/event_snaps/TLSEvent_1.png">http://cr.openjdk.java.net/~coffeys/event_snaps/TLSEvent_1.png</a></p>
<p>securityProp_2.png gives an example of how the JFR recording can
be queried to quickly locate events of interest (in this case,
code setting the jdk.tls.* Security properties). I still need to
clean up the TLSEvents testcase to improve test coverage and hope
to do that in coming days.<br>
</p>
<p>JBS record : <br>
* <a class="moz-txt-link-freetext" href="https://bugs.openjdk.java.net/browse/JDK-8148188">https://bugs.openjdk.java.net/browse/JDK-8148188</a><br>
</p>
<p>webrev :
<a class="moz-txt-link-freetext" href="http://cr.openjdk.java.net/~coffeys/webrev.8148188.v1/webrev/">http://cr.openjdk.java.net/~coffeys/webrev.8148188.v1/webrev/</a><br>
</p>
<pre class="moz-signature" cols="72">--
Regards,
Sean.</pre>
</body>
</html>