[oi-dev] JDK builds and crypto

[Andreas Wacknitz]

Am 11.08.23 um 16:49 schrieb Peter Tribble:
> As noted on IRC, there might be issues with JDK and crypto on OpenIndiana.
>
> The issue is that on Solaris/illumos (and only there) the jdk can
> offload crypto to
> the OS using the SunPKCS11 provider. That doesn't always work
> correctly, there's
> a flag:
>
> -Dsun.security.pkcs11.enable-solaris=false
>
> that just disables it so you should get the same behaviour as other
> platforms.
>
> In Tribblix I disable (in .../conf/security/sunpkcs11-solaris.cfg) the
> bits that I know
> don't work:
>
> https://github.com/tribblix/build/blob/master/patches/sunpkcs11-solaris.cfg.patch
>
> In OmniOS I think they change the preference order:
>
> https://github.com/omniosorg/omnios-build/blob/master/build/openjdk17/patches/security-pkcs11.patch
>
> I suggest you'll need to do one of those for the OI jdk builds too.
>
> --
> -Peter Tribble
> http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/
>
> _______________________________________________
> oi-dev mailing list
> oi-dev at openindiana.org
> https://openindiana.org/mailman/listinfo/oi-dev
Thanks Peter,

I will see whether I can motivate someone to take care of it ;-)

Best regards,
Andreas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openindiana.org/pipermail/oi-dev/attachments/20230811/23dd9478/attachment.html>