Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Enable the -XX:[+|-]CRIUSecProvider jvm option #18354

Merged
merged 1 commit into from
Nov 21, 2023
Merged

Enable the -XX:[+|-]CRIUSecProvider jvm option #18354

merged 1 commit into from
Nov 21, 2023

Commits on Nov 21, 2023

  1. Enable -XX:[+|-]CRIUSecProvider JVM option 

    Whenever we are performing a checkpoint
this is typically done by enabling
-XX:+EnableCRIUSupport. It will remove
all the security providers and the
CRIUSecProvider is inserted to the
runtime enviroment. This provides a more
locked down approach to what cryptography
is allowed while taking a checkpoint.

Therefore, this new flag is introduced by
passing it after -XX:+EnableCRIUSupport is
enabled. When this option is used, we no
longer make use of CRIUSecProvider and
instead use normal provider loading to
enable all security algorithms in an out
of the box state. This can allow users to
make use of any algorithms in the various
providers available.
    @WilburZjh
    WilburZjh committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    df6acd4 View commit details
    Browse the repository at this point in the history