Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Jul 2002 01:13:12 -0400 (EDT)
From:      Mikhail Kruk <meshko@cs.brandeis.edu>
To:        Chris Neustrup <druid45@idiom.com>
Cc:        java@FreeBSD.ORG
Subject:   Re: several security Java problems
Message-ID:  <Pine.LNX.4.44.0207250109131.23654-100000@daedalus.cs.brandeis.edu>
In-Reply-To: <3D3F4DCB.7060502@idiom.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> 1.  I cannot find the javax.net.ssl import.  I've looked in the 
> /usr/ports/java area and on the net and nothing jumps at me.

As someone already mentioned this is not worth a port, Sun's reference 
implementation is pure java and work out of the box. 
 
> 2.  I cannot find the javax.crypto import either.  I tried the cryptix 
> build, but it doesn't seem to give me a useful jar or whatever.

Again there is a pure java implementation from Sun which (most likely) 
just works, but last time I checked it, it was very incomplete. Try 
/usr/ports/java/bouncycastle, it's an open source clean room 
implementation JCE (javax.crypto is part of JCE). I did a small research 
on JCE implementations a while ago and Bouncycustle was a clear winner.

> 3.  I am trying to get the patch set 6 to work but it fails in a robot 
> source file edit.  The patch set 4 worked great and that's what I am 
> using now.  I would like to have this for the plugin.

no idea. You might have to re-download java sources if you havn't updated 
them since p4. 
 
> 4.  I have looked at 1.4, but since the 1.3.1 works OK I am not sure 
> this would be effective if I could get the ssl and crypto stuff to work 
> in 1.3.1

1.4 is unstable yet, going with 1.3.1 is a good idea. I can confirm SSL 
working fine with it.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-java" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.44.0207250109131.23654-100000>