Security provider fallback
Tom Tromey
tromey@redhat.com
Mon Mar 24 20:58:00 GMT 2003
>>>>> "Mark" == Mark Wielaard <mark@klomp.org> writes:
Tom> My first inclination is not to do this. The class library is a
Tom> library; printing to stderr like this is a bit unfriendly. It seems
Tom> to violate the bounds of what a library ought to do.
Mark> Our garbage collector does it in extreme situations. But I can leave out
Mark> the warning messages. The important bit is the fallback to a default
Mark> security manager if everything goes wrong (see below). Would the patch
Mark> be OK without the warnings?
Yes, definitely.
Mark> Note that the fallback (and warning) only works if there no
Mark> valid security providers defined and there are errors with all
Mark> security provider resources. So if there actually is a security
Mark> provider file/resource, but it is left empty by the user then
Mark> they still get what they want (no provider and no standard
Mark> algorithms).
Thanks. In that case I think the warning would be ok.
Tom
More information about the Java-patches
mailing list