Mailing-List: contact harmony-dev-help@incubator.apache.org; run by ezmlm
Precedence: bulk
Reply-To: harmony-dev@incubator.apache.org
Received-SPF: pass (asf.osuosl.org: domain of alexei.zakharov@gmail.com
 designates 64.233.166.182 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=I17AG8WSGCClzyoDbYjGVYZskF3Dly2qrKnzr/FEh/T9EqgJyUY51bq+4zkbt1b91T5YVN6aLQ1qSIndocuzOyhPjaD4tNvjNs7RPePv1hImG/ZZw6161bTH0utywffkqTsNhtOxoDZy7uO/yqWfRbu/tPWS82kab3MWu6EDAyU=
Message-ID: <2c9597b90607240926n1051ed59tc3d2ec36a2d1c5a5@mail.gmail.com>
Date: Mon, 24 Jul 2006 20:26:45 +0400
From: "Alexei Zakharov" <alexei.zakharov@gmail.com>
To: harmony-dev@incubator.apache.org
Subject: Re: [classlib] choose one [x-net] || [security] for HARMONY-536 (JSSE
 provider)
In-Reply-To: <6e47b64f0607240441r5d3e39d3mad094f95e69b239b@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <44BD30C0.4040700@pobox.com> <44BD5763.1050902@gmail.com>
	 <44BD5C71.20904@pobox.com>
	 <906dd82e0607182221h64a9e0s57ed19b861449dd1@mail.gmail.com>
	 <6e47b64f0607240112i3985e285m8bb1e4cfd1a4781c@mail.gmail.com>
	 <906dd82e0607240214w6e97d08t7258c9a065319081@mail.gmail.com>
	 <6e47b64f0607240441r5d3e39d3mad094f95e69b239b@mail.gmail.com>

Hi Stepan,

FYI there are other modules that contain providers, "jndi" for
example. The JNDI DNS provider is currently located there. If someone
will decide to implement some other JNDI provider we will need to
decide where should we put it. IMHO it is not a very good idea to keep
different types of providers (jndi and security here) at one place.

Regards,

2006/7/24, Stepan Mishura <stepan.mishura@gmail.com>:
> IMO, it is not a big issue. We may create one module for all providers (like
> 'tools' module) and building 'providers' module will produce a set of
> required jars.
>
> Thanks,
> Stepan.
>
>
> On 7/24/06, Mikhail Loenko wrote:
> >
> > If we create separate module for each provider then number of modules is
> > going
> > to be too big... (e.g. RI has 6 or 7 providers)
> >
> > Thanks,
> > Mikhail
> >
> > 2006/7/24, Stepan Mishura :
> > > On 7/19/06, Mikhail Loenko wrote:
> > > >
> > > > A long ago we agreed that providers go into a separate module. But
> > > > now I think it's might be not very reasonable.
> > >
> > >
> > > Hi Mikhail,
> > >
> > > Why you think that is not reasonable?
> > >
> > > Here is the initial proposal:
> > >
> > http://mail-archives.apache.org/mod_mbox/incubator-harmony-dev/200601.mbox/%3c6e47b64f0601170332k3d418fabwd25a264c5e0f1532@mail.gmail.com%3e
> > >
> > > Thanks,
> > > Stepan.
> > >
> > > Sun keeps certificates in its own proprietary format (JKS), while we
> > have
> > > > BKS from Bouncy Castle, so files will have to be converted. I can do
> > this
> > > > next week
> > > >
> > > > Thanks,
> > > > Mikhail
> > > >
> > > > 2006/7/19, Geir Magnusson Jr <geir@pobox.com>:
> > > > >
> > > > >
> > > > > Tim Ellison wrote:
> > > > > > Geir Magnusson Jr wrote:
> > > > > >> I'm integrating HARMONY-536, the JSSE provider.  Two things:
> > > > > >>
> > > > > >> 1) it's contributed to go into x-net, but the package namespace
> > is
> > > > > >>
> > > > > >>   o.a.h.security.provider.jsse
> > > > > >>
> > > > > >> so I wonder if this would be better off in the security
> > module.  If
> > > > not,
> > > > > >> we are stuck because we don't have a 'negative' patternset for
> > jar
> > > > > >> packaging, so it's getting sucked into security jar right now
> > anyway
> > > > :)
> > > > > >
> > > > > > IMHO it should be in x-net.  Can't you rename the package?
> > > > > >
> > > > >
> > > > > Of course.  Something was going to get moved, just wanted to see any
> > > > > other opinions..
> > > > >
> > > > >
> > > > > >> 2) I have a little test proggie that shows that it's negotiating
> > w/
> > > > the
> > > > > >> other side, but given we have no cacerts, it whines and gives up.
> > > > (It's
> > > > > >> a reasonable whine...)  Lazily and naively, I threw the cacerts
> > from
> > > > > >> Sun's JRE into jre/lib/security and prayed, but the security
> > deities
> > > > are
> > > > > >> not smiling on me today.  So, where does/what format/etc/etc
> > should
> > > > our
> > > > > >> root cert file go?
> > > > > >
> > > > > > Dunno.  I know you were just playing, but AIUI the use of root
> > > > > > certificates for popular CA's cost $'s don't they?
> > > > >
> > > > > I didn't think so.  I thought that they gave the root certs away
> > because
> > > > >  the value of a cert provider is directly proportional to the amount
> > of
> > > > > software out there that can understand it's certs...
> > > > >
> > > > > >
> > > > > > Hopefully Boris will enlighten us to the format used.
> > > > > >
> > > > > > Regards,
> > > > > > Tim
> >
> >
>
> --
> Thanks,
> Stepan Mishura
> Intel Middleware Products Division
>
> ------------------------------------------------------
> Terms of use : http://incubator.apache.org/harmony/mailing.html
> To unsubscribe, e-mail: harmony-dev-unsubscribe@incubator.apache.org
> For additional commands, e-mail: harmony-dev-help@incubator.apache.org
>
>


-- 
Alexei Zakharov,
Intel Middleware Product Division

---------------------------------------------------------------------
Terms of use : http://incubator.apache.org/harmony/mailing.html
To unsubscribe, e-mail: harmony-dev-unsubscribe@incubator.apache.org
For additional commands, e-mail: harmony-dev-help@incubator.apache.org