Previous revision 497549 switched to install bcprov.jar build from sources
instead of bundled version. However, the bundled version of JAR file is signed
that is essential as is provides an implementation of a Provider
in the Java Cryptography Architecture. For details, refer to
https://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/HowToImplAProvider.html
Partially back out that revision to install bundled bcprov.jar as before.
Thanks to Alex Dupre for reporting this.
Reported by: ale
This release adds support for the qTESLA signature alogirithm
and the password hashing algorithm Argon2. Support for endpoint
ID validation has been added to the BCJSSE, and the TLS/BCJSEE API's
journey to TLS 1.3 has continued.
Support has been added to the provider for the Ed25519 and Ed448
signature algorithms and provider support has also been added
for X25519 and X448.
A new API for directly parsing and creating S/MIME documents has been added
to the PKIX APIs. In terms of bug fixes, the TLS api will now tolerate
unrecognized hash algorithms and SNI types.
An issue that meant XMSS/XMSS^MT private keys would sometime reload
incorrectly has been fixed.
RFC3211WrapEngine will now properly handle messages longer than 127 bytes,
and an endianness issue for encoding parameters longer than 255 bytes
for CSHAKE has been fixed, some CMP parsing issues have been found and
dealt with, the co-factors for id-tc26-gost-3410-12-256-paramSetA and
id-tc26-gost-3410-12-512-paramSetC have been corrected and more
work has been done on EC key encoding to make sure named curve
parameters are preserved where possible. BCFKS key stores can
now be signature protected rather than passord protected.
See also https://www.bouncycastle.org/releasenotes.html
Also, the port now installs version of bcprov.jar built from sources
removing code since older java/bouncycastle port that installs
bcprov.jar bundled with distfile.
* Sort LIB_DEPENDS and USE_XORG.
* Add a dependency in alsa-lib now that sound is supported on FreeBSD.
* Don't disable dtrace now that it is supported on FreeBSD.
* Less intrusive iconv change.
. Sort LIB_DEPENDS and USE_XORG
. Add a dependency in alsa-lib now that sound is supported on FreeBSD.
. Don't disable dtrace now that it is supported on FreeBSD.
. Less intrusive iconv change.
libinstrument.so and libjdwp.so do not need anything from $LOCALBASE but
libsplashscreen.so does. For example,
% cd /usr/local/openjdk11
% bin/java -jar demo/jfc/SwingSet2/SwingSet2.jar
ld-elf.so.1: /usr/local/openjdk11/lib/libsplashscreen.so: Undefined symbol
"libiconv_open"
PR: 236759
* Put MD specific include files (e.g. jni_md.h) in a subdirectory named
'freebsd' rather than 'bsd'. [1]
* Remove the necessity to always have /usr/local/include in the header
paths and linker paths. This allows jshell to use the system iconv.h
rather than the third party one and link correctly. [2]
* Fix getting process commands and arguments on FreeBSD.
* Bump PORTREVISION.
All fixes need forward porting to openjdk12.
PR: 236754 [1], 236759 [2]
Submitted by: Kurt Miller [2]
