CONVERTED DATA

BugTraq+ Release Management Values

COMMIT TO FIX:
mantis

FIXED IN:
mantis

INTEGRATED IN:
mantis
mantis-b03


                                     

SUGGESTED FIX

See the webrev in attachment.
###@###.### 2002-07-31
                                     

EVALUATION

The corresponding RFE under classes_security is 4518762
###@###.### 2002-06-26

A potential fix has been identified. The fix is to disable JPI code which is responsible for creating and seeding a SecureRandom object. The fix also involves changing the way the sslContext.init method is being called. By passing a null as the third argument to sslContext.init, JSSE will create and seed a SecureRandom object. The suggested fix contains source diff of ext/plugin/java/src/sun/plugin/net/protocol/https/Handler.java for the Hopper version. I'm working on eliminating unnecessary java and native source code related to SecureRandom in JPI.
###@###.### 2002-07-19

A fix has been integrated into JPI's Mantis ws. 
###@###.### 2002-07-31