[PATCH FOR REVIEW] Allow OpenJDK to be built with the unlimited crypto policy (original) (raw)

Brad Wetmore bradford.wetmore at oracle.com
Thu Sep 27 18:42:45 UTC 2012

On 9/27/2012 9:50 AM, Andrew Hughes wrote:

----- Original Message -----

Will you be putting this back yourself? If so let me know when you go in, and I can update the bug once you're in.

I will, though I'll need a bug ID for it. I presume tl is ok as the forest to use? This going into 8? Then yes. At first, yes. Do you have any objections to me proposing it for 7u too, in due course?

None here, other than needing a separate code review.

Brad

7201205: Add Makefile configuration option to build with unlimited crypto in OpenJDK.

Great, thanks! I'll push it.

Brad

Mark wrote: > The summary is that it was just easier to remove unused > classes > that > made the code tricky to understand for no good reason except > for > some > secret proprietary code. Unfortunately, Oracle and some of our commercial (non-OpenJDK) licensees still depend on that tricky code. :( I'd personally love to strip it all out, but we have to balance all of its consumers (Oracle SE and ME, commercial source/binary licensees, OpenJDK, etc.) Andrew wrote: > I'm sure it would be easy enough to dump those classes if > Oracle > started producing OpenJDK binaries licensed under the GPL, > rather > than binaries from their proprietary fork. Unfortunately, not likely in our current export/import climate. Yes, this is what I thought. We just have to make sure to test well before shipping binaries. Brad

More information about the security-dev mailing list