ibmruntimes / openj9-openjdk-jdk17

Extensions for OpenJDK 17 for Eclipse OpenJ9
GNU General Public License v2.0
23 stars 53 forks source link

8325254: CKA_TOKEN private and secret keys are not necessarily sensitive #329

Closed BobMDu closed 6 months ago

BobMDu commented 6 months ago

Backporting a fix from OpenJDK in advance that changes the sensitivity check for a key to only include CKA_TOKEN if it's using NSS. Also adding the isNSS() function since it is not present yet in jdk17.

Change has the backported to jdk21 but did not make it into the jdk17 before the latest cutoff. Backporting early to get this in for the next Semeru release as this change is important to Z platforms.

BobMDu commented 6 months ago

Copyrights, indenting, and commit message fixed.

keithc-ca commented 6 months ago

Please avoid lines longer than 72 characters in the body of the commit message:

Backporting a fix from OpenJDK in advance that changes the sensitivity 
check for a key to only include CKA_TOKEN if it's using NSS.
BobMDu commented 6 months ago

Fixed.

keithc-ca commented 6 months ago

Jenkins line endings check

keithc-ca commented 6 months ago

Jenkins compile zlinux jdk17