<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">Am 11.08.23 um 16:49 schrieb Peter
Tribble:<br>
</div>
<blockquote type="cite"
cite="mid:CAEgYsbEiQNdyza7n357TEHkQDpe-1zr6_GwisGauWQEyh3GG+g@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div>As noted on IRC, there might be issues with JDK and crypto
on OpenIndiana.<br>
<br>
The issue is that on Solaris/illumos (and only there) the jdk
can offload crypto to<br>
the OS using the SunPKCS11 provider. That doesn't always work
correctly, there's<br>
a flag:<br>
<br>
-Dsun.security.pkcs11.enable-solaris=false<br>
<br>
that just disables it so you should get the same behaviour as
other platforms.<br>
<br>
In Tribblix I disable (in
.../conf/security/sunpkcs11-solaris.cfg) the bits that I know<br>
don't work:<br>
<br>
<a
href="https://github.com/tribblix/build/blob/master/patches/sunpkcs11-solaris.cfg.patch"
moz-do-not-send="true" class="moz-txt-link-freetext">https://github.com/tribblix/build/blob/master/patches/sunpkcs11-solaris.cfg.patch</a><br>
<br>
In OmniOS I think they change the preference order:<br>
<br>
<a
href="https://github.com/omniosorg/omnios-build/blob/master/build/openjdk17/patches/security-pkcs11.patch"
moz-do-not-send="true" class="moz-txt-link-freetext">https://github.com/omniosorg/omnios-build/blob/master/build/openjdk17/patches/security-pkcs11.patch</a><br>
<br>
</div>
I suggest you'll need to do one of those for the OI jdk builds
too.<br>
<div>
<div><br>
<span class="gmail_signature_prefix">-- </span><br>
<div dir="ltr" class="gmail_signature"
data-smartmail="gmail_signature">-Peter Tribble<br>
<a href="http://www.petertribble.co.uk/" target="_blank"
moz-do-not-send="true" class="moz-txt-link-freetext">http://www.petertribble.co.uk/</a>
- <a href="http://ptribble.blogspot.com/" target="_blank"
moz-do-not-send="true" class="moz-txt-link-freetext">http://ptribble.blogspot.com/</a></div>
</div>
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
oi-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:oi-dev@openindiana.org">oi-dev@openindiana.org</a>
<a class="moz-txt-link-freetext" href="https://openindiana.org/mailman/listinfo/oi-dev">https://openindiana.org/mailman/listinfo/oi-dev</a>
</pre>
</blockquote>
Thanks Peter,<br>
<br>
I will see whether I can motivate someone to take care of it ;-)<br>
<br>
Best regards,<br>
Andreas<br>
</body>
</html>