-
Notifications
You must be signed in to change notification settings - Fork 1
Remove forgotten dead code from #13 and #14 #21
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
openjdk#13 isn't a perfect revert of 0af22dc limited to SSLContextImpl.java and SunJSSE.java, since it doesn't remove the SharedSecrets import. This was already in this way in rh2020290-support_tls_1_3_in_fips.v1.patch, I'm now realizing this when doing the OpenJDK 11 backport and retrying the same approach in OpenJDK 17: ~~~ # Revert openjdk#13 git show 0bd5ca9 | git apply -R # Redo openjdk#13 by reverting 0af22dc in SSLContextImpl.java and SunJSSE.java git show 0af22dc | git apply -R --include=src/java.base/share/classes/sun/security/ssl/* ~~~ In openjdk#14, I forgot to delete the DHKF and DHKFLock static variables from FIPSKeyImporter, which are no longer used, see rh-openjdk#14 (comment).
gnu-andrew
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks fine to me.
|
Any idea why we still have a test failure on Linux? Seems unrelated to this change. |
Yes, the Linux failure is the currently known one ( Windows
|
Ah, for some reason, I thought we'd fixed that. I'll open a PR that removes it. We can always add the line temporarily if we need the debugging info for a specific case.
As both were present before, I don't see them as a blocker for this. I don't see this failure in upstream 17u so I'll sync with the latest release and see if that fixes it. We may as well get this change in along with the NSS DB support. |
|
I've removed the |
|
From the 17.0.5 run, all the tests seem to be passing: https://github.com/gnu-andrew/jdk/actions/runs/3528808451 |
#13 isn't a perfect revert of 0af22dc limited to SSLContextImpl.java and SunJSSE.java, since it doesn't remove the SharedSecrets import. This was already in this way in rh2020290-support_tls_1_3_in_fips.v1.patch, I'm now realizing this when doing the OpenJDK 11 backport and retrying the same approach in OpenJDK 17: ~~~ # Revert #13 git show 0bd5ca9 | git apply -R # Redo #13 by reverting 0af22dc in SSLContextImpl.java and SunJSSE.java git show 0af22dc | git apply -R --include=src/java.base/share/classes/sun/security/ssl/* ~~~ In #14, I forgot to delete the DHKF and DHKFLock static variables from FIPSKeyImporter, which are no longer used, see #14 (comment). Reviewed-by: @gnu-andrew
Remove forgotten dead code from #13 and #14
#13 isn't a perfect revert of 0af22dc limited to
SSLContextImpl.javaandSunJSSE.java, since it doesn't remove theSharedSecretsimport. This was already in this way inrh2020290-support_tls_1_3_in_fips.v1.patch, I'm now realizing this when doing the OpenJDK 11 backport (rh-openjdk/jdk11u#7) and retrying the same approach in OpenJDK 17:In #14, I forgot to delete the
DHKFandDHKFLockstatic variables fromFIPSKeyImporter, which are no longer used, see this #14 comment.