Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8170157

Enable unlimited cryptographic policy by default in Oracle JDK builds

    Details

      Backports

        Description

        Oracle JDK/JRE has received approval to enable unlimited policy by default.

        The plan is to set the default configure property to "enabled".

        For distributions that must continue to use limited crypto, they need to add the configure flag to their build:

            // --disable-unlimited-crypto
            // Disable unlimited crypto policy [enabled]

            % sh configure --disable-unlimited-crypto
         

          Issue Links

            Activity

            Hide
            coffeys Sean Coffey added a comment -
            For JDK Update releases - I still plan to go with below policy. Keep in mind that 'crypto.policy' is not defined in Update releases and this aids compatibility around use of legacy jar files.

            Logic is implemented in this preference order :
            * crypto.policy *not* defined by default
            * if crypto.policy is defined, honour that setting.
            * if crypto.policy is not defined and legacy jars are present, honour them.
            * if crypto.policy is not defined and no legacy jars are present, use default of *unlimited*
            Show
            coffeys Sean Coffey added a comment - For JDK Update releases - I still plan to go with below policy. Keep in mind that 'crypto.policy' is not defined in Update releases and this aids compatibility around use of legacy jar files. Logic is implemented in this preference order : * crypto.policy *not* defined by default * if crypto.policy is defined, honour that setting. * if crypto.policy is not defined and legacy jars are present, honour them. * if crypto.policy is not defined and no legacy jars are present, use default of *unlimited*
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/dev/rev/9475c1488d29
            User: wetmore
            Date: 2016-12-06 01:05:54 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/dev/rev/9475c1488d29 User: wetmore Date: 2016-12-06 01:05:54 +0000
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/51843ad502b5
            User: wetmore
            Date: 2016-12-06 01:05:59 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/dev/jdk/rev/51843ad502b5 User: wetmore Date: 2016-12-06 01:05:59 +0000
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/jdk9/rev/9475c1488d29
            User: lana
            Date: 2016-12-07 19:33:27 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/jdk9/rev/9475c1488d29 User: lana Date: 2016-12-07 19:33:27 +0000
            Hide
            hgupdate HG Updates added a comment -
            URL: http://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/51843ad502b5
            User: lana
            Date: 2016-12-07 19:33:44 +0000
            Show
            hgupdate HG Updates added a comment - URL: http://hg.openjdk.java.net/jdk9/jdk9/jdk/rev/51843ad502b5 User: lana Date: 2016-12-07 19:33:44 +0000

              People

              • Assignee:
                wetmore Bradford Wetmore
                Reporter:
                wetmore Bradford Wetmore
              • Votes:
                0 Vote for this issue
                Watchers:
                13 Start watching this issue

                Dates

                • Due:
                  Created:
                  Updated:
                  Resolved: