jdk/src/share/lib/security/java.security-solaris
changeset 16915 675d1569af3e
parent 16744 b3ca7ed8e44f
child 16920 d062d91d9dec
equal deleted inserted replaced
16914:1703bf7541ec 16915:675d1569af3e
    76 security.provider.9=com.sun.security.sasl.Provider
    76 security.provider.9=com.sun.security.sasl.Provider
    77 security.provider.10=org.jcp.xml.dsig.internal.dom.XMLDSigRI
    77 security.provider.10=org.jcp.xml.dsig.internal.dom.XMLDSigRI
    78 security.provider.11=sun.security.smartcardio.SunPCSC
    78 security.provider.11=sun.security.smartcardio.SunPCSC
    79 
    79 
    80 #
    80 #
    81 # Select the source of seed data for SecureRandom. By default an
    81 # Sun Provider SecureRandom seed source.
    82 # attempt is made to use the entropy gathering device specified by
    82 #
    83 # the securerandom.source property. If an exception occurs when
    83 # Select the primary source of seed data for the "SHA1PRNG" and
    84 # accessing the URL then the traditional system/thread activity
    84 # "NativePRNG" SecureRandom implementations in the "Sun" provider.
    85 # algorithm is used.
    85 # (Other SecureRandom implementations might also use this property.)
    86 #
    86 #
    87 # On Solaris and Linux systems, if file:/dev/urandom is specified and it
    87 # On Unix-like systems (for example, Solaris/Linux/MacOS), the
    88 # exists, a special SecureRandom implementation is activated by default.
    88 # "NativePRNG" and "SHA1PRNG" implementations obtains seed data from
    89 # This "NativePRNG" reads random bytes directly from /dev/urandom.
    89 # special device files such as file:/dev/random.
    90 #
    90 #
    91 # On Windows systems, the URLs file:/dev/random and file:/dev/urandom
    91 # On Windows systems, specifying the URLs "file:/dev/random" or
    92 # enables use of the Microsoft CryptoAPI seed functionality.
    92 # "file:/dev/urandom" will enable the native Microsoft CryptoAPI seeding
    93 #
    93 # mechanism for SHA1PRNG.
    94 securerandom.source=file:/dev/urandom
    94 #
    95 #
    95 # By default, an attempt is made to use the entropy gathering device
    96 # The entropy gathering device is described as a URL and can also
    96 # specified by the "securerandom.source" Security property.  If an
    97 # be specified with the system property "java.security.egd". For example,
    97 # exception occurs while accessing the specified URL:
    98 #   -Djava.security.egd=file:/dev/urandom
    98 #
    99 # Specifying this system property will override the securerandom.source
    99 #     SHA1PRNG:
   100 # setting.
   100 #         the traditional system/thread activity algorithm will be used.
       
   101 #
       
   102 #     NativePRNG:
       
   103 #         a default value of /dev/random will be used.  If neither
       
   104 #         are available, the implementation will be disabled.
       
   105 #         "file" is the only currently supported protocol type.
       
   106 #
       
   107 # The entropy gathering device can also be specified with the System
       
   108 # property "java.security.egd". For example:
       
   109 #
       
   110 #   % java -Djava.security.egd=file:/dev/random MainClass
       
   111 #
       
   112 # Specifying this System property will override the
       
   113 # "securerandom.source" Security property.
       
   114 #
       
   115 # In addition, if "file:/dev/random" or "file:/dev/urandom" is
       
   116 # specified, the "NativePRNG" implementation will be more preferred than
       
   117 # SHA1PRNG in the Sun provider.
       
   118 #
       
   119 securerandom.source=file:/dev/random
       
   120 
       
   121 #
       
   122 # A list of known strong SecureRandom implementations.
       
   123 #
       
   124 # To help guide applications in selecting a suitable strong
       
   125 # java.security.SecureRandom implementation, Java distributions should
       
   126 # indicate a list of known strong implementations using the property.
       
   127 #
       
   128 # This is a comma-separated list of algorithm and/or algorithm:provider
       
   129 # entries.
       
   130 #
       
   131 securerandom.strongAlgorithms=NativePRNGBlocking:SUN
   101 
   132 
   102 #
   133 #
   103 # Class to instantiate as the javax.security.auth.login.Configuration
   134 # Class to instantiate as the javax.security.auth.login.Configuration
   104 # provider.
   135 # provider.
   105 #
   136 #
   159                com.sun.org.apache.xalan.internal.utils.,\
   190                com.sun.org.apache.xalan.internal.utils.,\
   160                com.sun.org.glassfish.external.,\
   191                com.sun.org.glassfish.external.,\
   161                com.sun.org.glassfish.gmbal.,\
   192                com.sun.org.glassfish.gmbal.,\
   162                com.oracle.xmlns.internal.,\
   193                com.oracle.xmlns.internal.,\
   163                com.oracle.webservices.internal.,\
   194                com.oracle.webservices.internal.,\
   164 	       jdk.internal.,\
   195                jdk.internal.,\
   165 	       jdk.nashorn.internal.,\
   196                jdk.nashorn.internal.,\
   166 	       jdk.nashorn.tools.
   197                jdk.nashorn.tools.
   167 
   198 
   168 #
   199 #
   169 # List of comma-separated packages that start with or equal this string
   200 # List of comma-separated packages that start with or equal this string
   170 # will cause a security exception to be thrown when
   201 # will cause a security exception to be thrown when
   171 # passed to checkPackageDefinition unless the
   202 # passed to checkPackageDefinition unless the
   187                    com.sun.org.apache.xalan.internal.utils.,\
   218                    com.sun.org.apache.xalan.internal.utils.,\
   188                    com.sun.org.glassfish.external.,\
   219                    com.sun.org.glassfish.external.,\
   189                    com.sun.org.glassfish.gmbal.,\
   220                    com.sun.org.glassfish.gmbal.,\
   190                    com.oracle.xmlns.internal.,\
   221                    com.oracle.xmlns.internal.,\
   191                    com.oracle.webservices.internal.,\
   222                    com.oracle.webservices.internal.,\
   192 		   jdk.internal.,\
   223                    jdk.internal.,\
   193 		   jdk.nashorn.internal.,\
   224                    jdk.nashorn.internal.,\
   194 		   jdk.nashorn.tools.
   225                    jdk.nashorn.tools.
   195 
   226 
   196 #
   227 #
   197 # Determines whether this properties file can be appended to
   228 # Determines whether this properties file can be appended to
   198 # or overridden on the command line via -Djava.security.properties
   229 # or overridden on the command line via -Djava.security.properties
   199 #
   230 #
   427 # Note: This property is currently used by Oracle's JSSE implementation.
   458 # Note: This property is currently used by Oracle's JSSE implementation.
   428 # It is not guaranteed to be examined and used by other implementations.
   459 # It is not guaranteed to be examined and used by other implementations.
   429 #
   460 #
   430 # Example:
   461 # Example:
   431 #   jdk.tls.disabledAlgorithms=MD5, SHA1, DSA, RSA keySize < 2048
   462 #   jdk.tls.disabledAlgorithms=MD5, SHA1, DSA, RSA keySize < 2048
   432 i
   463