United StatesChange Country, Oracle Worldwide Web Sites Communities I am a... I want to...
Bug ID: JDK-6572493 Bundle security components for JKernel
JDK-6572493 : Bundle security components for JKernel

Details
Type:
Enhancement
Submit Date:
2007-06-21
Status:
Closed
Updated Date:
2012-10-18
Project Name:
JDK
Resolved Date:
2008-02-12
Component:
deploy
OS:
generic
Sub-Component:
deployment_toolkit
CPU:
generic
Priority:
P2
Resolution:
Fixed
Affected Versions:
6u4
Fixed Versions:
6u10 (b02)

Related Reports
Backport:
Relates:
Relates:

Sub Tasks

Description
Need code for JRE builds and JKernel to:
  1) Avoid dependencies on most Java security classes
  2) Generate secure hashcodes corresponding to each JKernel bundle for a resource
     that will be used by JKernel during bundle downloads
  3) Check downloaded bundles to see that they are not corrupt and that they contain
     the same bits as in the bundles created by a given JRE build

See comments for additional details.

                                    

Comments
SUGGESTED FIX

The following new classes are proposed to implement this RFE:

  sun.security.provider.StandaloneMessageDigest
  sun.security.provider.StandaloneSHA
  sun.io.CheckedFileInputStream
  sun.io.CheckedFileOutputStream
  sun.misc.ByteArrayToFromHexDigits (might not need this long term)

Plus the following build utility:

/a/jdk/j2se/make/tools/jkernel/AppendCheckValue.java

Plus changes to various Jkernel and make files.


   
*** (#1 of 1): [ UNSAVED ] ###@###.###
                                     
2007-06-21
EVALUATION

Definitely need this.
                                     
2007-06-22



Hardware and Software, Engineered to Work Together