From owner-freebsd-java Wed Jul 24 22:13:19 2002 Delivered-To: freebsd-java@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 150FD37B400 for ; Wed, 24 Jul 2002 22:13:17 -0700 (PDT) Received: from daedalus.cs.brandeis.edu (daedalus.cs.brandeis.edu [129.64.3.179]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6BB1443E65 for ; Wed, 24 Jul 2002 22:13:16 -0700 (PDT) (envelope-from meshko@daedalus.cs.brandeis.edu) Received: from localhost (meshko@localhost) by daedalus.cs.brandeis.edu (8.9.3/8.9.3) with ESMTP id BAA23665; Thu, 25 Jul 2002 01:13:12 -0400 Date: Thu, 25 Jul 2002 01:13:12 -0400 (EDT) From: Mikhail Kruk To: Chris Neustrup Cc: java@FreeBSD.ORG Subject: Re: several security Java problems In-Reply-To: <3D3F4DCB.7060502@idiom.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-java@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > 1. I cannot find the javax.net.ssl import. I've looked in the > /usr/ports/java area and on the net and nothing jumps at me. As someone already mentioned this is not worth a port, Sun's reference implementation is pure java and work out of the box. > 2. I cannot find the javax.crypto import either. I tried the cryptix > build, but it doesn't seem to give me a useful jar or whatever. Again there is a pure java implementation from Sun which (most likely) just works, but last time I checked it, it was very incomplete. Try /usr/ports/java/bouncycastle, it's an open source clean room implementation JCE (javax.crypto is part of JCE). I did a small research on JCE implementations a while ago and Bouncycustle was a clear winner. > 3. I am trying to get the patch set 6 to work but it fails in a robot > source file edit. The patch set 4 worked great and that's what I am > using now. I would like to have this for the plugin. no idea. You might have to re-download java sources if you havn't updated them since p4. > 4. I have looked at 1.4, but since the 1.3.1 works OK I am not sure > this would be effective if I could get the ssl and crypto stuff to work > in 1.3.1 1.4 is unstable yet, going with 1.3.1 is a good idea. I can confirm SSL working fine with it. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-java" in the body of the message