Am 11.08.23 um 16:49 schrieb Peter Tribble:
As noted on IRC, there might be issues with JDK and crypto on OpenIndiana.

The issue is that on Solaris/illumos (and only there) the jdk can
offload crypto to
the OS using the SunPKCS11 provider. That doesn't always work
correctly, there's
a flag:

-Dsun.security.pkcs11.enable-solaris=false

that just disables it so you should get the same behaviour as other
platforms.

In Tribblix I disable (in .../conf/security/sunpkcs11-solaris.cfg) the
bits that I know
don't work:

https://github.com/tribblix/build/blob/master/patches/sunpkcs11-solaris.cfg.patch

In OmniOS I think they change the preference order:

https://github.com/omniosorg/omnios-build/blob/master/build/openjdk17/patches/security-pkcs11.patch

I suggest you'll need to do one of those for the OI jdk builds too.

--
-Peter Tribble
http://www.petertribble.co.uk/ - http://ptribble.blogspot.com/

_______________________________________________
oi-dev mailing list
[email protected]
https://openindiana.org/mailman/listinfo/oi-dev
Thanks Peter,

I will see whether I can motivate someone to take care of it ;-)

Best regards,
Andreas
_______________________________________________
oi-dev mailing list
[email protected]
https://openindiana.org/mailman/listinfo/oi-dev

Reply via email to