JDK-8037745 : Consider re-enabling PKCS11 mechanisms previously disabled due to Solaris bug 7050617
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.crypto:pkcs11
  • Affected Version: 9
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • OS: solaris
  • CPU: x86,sparc
  • Submitted: 2014-03-18
  • Updated: 2017-08-04
  • Resolved: 2014-05-21
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 8 JDK 9
8u40Fixed 9 b15Fixed
Related Reports
Duplicate :  
Relates :  
Relates :  
Relates :  
Sub Tasks
JDK-8185825 :  
Description
The following mechanisms are disabled in the sunpkcs11-solaris.cfg file: 

# the following mechanisms are disabled due to no cloning support
# (Solaris bug 7050617)
  CKM_SHA256
  CKM_SHA384
  CKM_SHA512

This bug has been fixed in S11 and backported to S10, so we should investigate whether these mechanisms can be re-enabled for JDK 9.

Comments
Release Note comment: If you are using Solaris 10, a change was made to re-enable operations with MD5, SHA1, and SHA2 through the Solaris Crypto Framework. If you experience a CloneNotSupportedException or PKCS11 error CKR_SAVED_STATE_INVALID with 8u40, you should verify and apply the below patches or newer version of them: 150531-02 on sparc 150636-01 on x86
13-07-2015