JDK-7197245 : Eliminate sun.security.ssl.JsseJce dependency on sun.security.ec
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 8
  • Priority: P3
  • Status: Closed
  • Resolution: Duplicate
  • OS: generic
  • CPU: generic
  • Submitted: 2012-09-10
  • Updated: 2012-09-17
  • Resolved: 2012-09-17
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8
8Resolved
Related Reports
Duplicate :  
JDK-7194075 - Various classes of sunec.jar are duplicated in rt.jar
Relates :  
JDK-6995421 - Eliminate the static dependency to sun.security.ec.ECKeyFactory
Description
One of JSSE classes has the following dependencies:

sun.security.ssl.JsseJce                 -> sun.security.ec.NamedCurve (sunec)
sun.security.ssl.JsseJce                 -> sun.security.ec.ECParameters (sunec)

This dependency creates a number of problems. First is the embedded case where the EC provider may not installed. Second is that it creates a split-package issue for Jigsaw/modularization as a small number of sun.security.ec classes end up in the base module, the rest in the sunec module. 

See also 7194075 where some of the sun.security.ec classes are duplicated in rt.jar, this also needs to be fixed.
Comments
EVALUATION JsseJce class in the SunJSSE provider accesses SunEC classes directly instead of using the JCE framework.
10-09-2012
SUGGESTED FIX Access the EC parameters object via the JCE framework instead of via the SunEC provider classes directly.
10-09-2012