File tree Expand file tree Collapse file tree 1 file changed +1
-20
lines changed
src/java.base/share/classes/sun/security/ssl Expand file tree Collapse file tree 1 file changed +1
-20
lines changed Original file line number Diff line number Diff line change 11/*
2- * Copyright (c) 1999, 2021 , Oracle and/or its affiliates. All rights reserved.
2+ * Copyright (c) 1999, 2024 , Oracle and/or its affiliates. All rights reserved.
33 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
44 *
55 * This code is free software; you can redistribute it and/or modify it
3131
3232/**
3333 * The JSSE provider.
34- *
35- * SunJSSE now supports an experimental FIPS compliant mode when used with an
36- * appropriate FIPS certified crypto provider. In FIPS mode, we:
37- * . allow only TLS 1.0 or later
38- * . allow only FIPS approved ciphersuites
39- * . perform all crypto in the FIPS crypto provider
40- *
41- * It is currently not possible to use both FIPS compliant SunJSSE and
42- * standard JSSE at the same time because of the various static data structures
43- * we use.
44- *
45- * However, we do want to allow FIPS mode to be enabled at runtime and without
46- * editing the java.security file. That means we need to allow
47- * Security.removeProvider("SunJSSE") to work, which creates an instance of
48- * this class in non-FIPS mode. That is why we delay the selection of the mode
49- * as long as possible. This is until we open an SSL/TLS connection and the
50- * data structures need to be initialized or until SunJSSE is initialized in
51- * FIPS mode.
52- *
5334 */
5435public class SunJSSE extends java .security .Provider {
5536
You can’t perform that action at this time.
0 commit comments