Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Received-SPF: pass (nike.apache.org: local policy includes SPF record at
 spf.trusted-forwarder.org)
Date: Tue, 12 Nov 2013 11:19:20 +0530
From: Prasanna Santhanam <tsp@apache.org>
To: dev@cloudstack.apache.org
Cc: Syed Ahmed <sahmed@cloudops.com>
Subject: Re: SSL and JCE
Message-ID: <20131112054920.GA4305@cloud-2.local>
Mail-Followup-To: dev@cloudstack.apache.org,
	Syed Ahmed <sahmed@cloudops.com>
References: 
 <CAKRHFXXaJp0dDSsFvT1DJqHopd+S3ya522TT2Zk_8Q_XqhK6FQ@mail.gmail.com>
 <52814A77.1050203@cloudops.com>
 <CAKRHFXWXWaADLPoX741ED9bnL-t=a_z5hwwN1D7EeuqxvdQS6w@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: 
 <CAKRHFXWXWaADLPoX741ED9bnL-t=a_z5hwwN1D7EeuqxvdQS6w@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)

My MacOSX 1.6 jdk seems to have the crypto extensions jce builtin and
the build+test works. JDK 1.7 install does not have them though.

The JCE kit seems to carry a BCL which is not ASF friendly [1]. But
this being part of the Java install and not the project it should be
okay IMO if we note it in our wiki on building the project.

As for legal aspects - I found this which might be of some relevance.  
http://markmail.org/message/evtkc656gewrkruf

[1] http://www.apache.org/legal/3party.html#transition-examples

On Mon, Nov 11, 2013 at 10:45:12PM +0100, Laszlo Hornyak wrote:
> Hi,
> 
> That is a good question, I do not know for sure, but this package needs to
> be signed by oracle, it is not redistributable and has teritorial import
> restrictions, so it could be problematic :-( I hope it is not. Guys, can
> someone help us here?
> 
> 
> On Mon, Nov 11, 2013 at 10:21 PM, Syed Ahmed <sahmed@cloudops.com> wrote:
> 
> > Hi Laszlo,
> >
> > The CertService uses BouncyCastle for certificate parsing and validation.
> > The JCE extension provides the API for using BouncyCastle as the provider.
> > So, JCE is required. I know that BouncyCastle is added in CS. Would it be
> > possible to add JCE as a dependency too?
> >
> > Thanks,
> > -Syed
> >
> >
> > On 13-11-10 09:55 AM, Laszlo Hornyak wrote:
> >
> >> Hi Sahmed and list,
> >>
> >> I ran into some failing tests this weekend related to the patch
> >> 0076307863e9155273d9e4c14282de429388c9e9 apparently jenkins fails for
> >> the same reason. I did a short investigation and it turned out that in
> >> order to run the tests correctly, one has to download the sun jce policy
> >> files and put it in the jdk replacing the original policies.
> >>
> >> Questions:
> >> - Is there a more convenient deployment process? :-) It would be very
> >> useful for the jenkins environment as well.
> >> - I gave it a try and patched the oracle jdk 1.7 with the same plugin, it
> >> did not work. Do you know a way to make it work again with jdk 1.7?
> >>
> >> Thank you,
> >> Laszlo
> >>
> >> --
> >>
> >> EOF
> >>
> >
> >
> 
> 
> -- 
> 
> EOF

-- 
Prasanna.,

------------------------
Powered by BigRock.com