Sunmary:

The PKCS11 and UCrypto providers depend on native crypto libraries in Solaris, and depending on what version of Solaris you are using, can have outstanding bugs which can cause exceptions, etc at the Java layer. Sometimes these bugs cannot be patched, and users have to upgrade to a new version of Solaris. All of this makes the portability of apps using these providers a bit unstable.

This proposal suggests looking into ways that we can isolate users from the underlying issues. For example, we might be able to enhance our providers to query the version/patch of Solaris and disable certain algorithms that have outstanding bugs.