OpenJDK Governing Board Minutes: 2017/3/23

The OpenJDK Governing Board met via conference call on Thursday, 23 March 2017 at 16:00 UTC with the following agenda:

  1. Vulnerability Group (NDA/License)
  2. Infrastructure Update: CSR and Submission Forest
  3. Any other business

Four Board members were present: Georges Saab, Doug Lea, John Duimovich, and Mark Reinhold.

The intent of these minutes is to capture the conversational flow of the Board's discussion and also to record decisions. If you are interested only in the latter then search for the word "AGREED" throughout the text.

1. Vulnerability Group (NDA/License)

Georges stated that the Vulnerability Group NDA/License had been scrutinized by a various lawyers from different companies. He believed that the Group's creation would follow the usual process: somebody would propose the creation and the Governing Board (GB) would approve it via call for votes (CFV). Georges continued saying that the Group would be special in terms of transparency due to the nature of its work. Mark said that the CFV would include a proposal to keep certain communications confidential. Doug noted that while everybody agreed in principle, he recommended that the communication exception be circulated to the GB in advance for comments. Mark agreed and added that he anticipated Group creation in mid-April.

Doug asked whether there had been any changes to the NDA/License since it was last distributed. Georges replied that there were not many changes and he could send the GB a copy of the agreement.

2. Infrastructure Update: CSR and Submission Forest

Georges reported that alpha testing of the submission forest was on-going and bug reports were being addressed. He expected the forest to be more widely used in the future. Mark said he expected to publish documentation. Doug requested that it include an explanation of how the submission forest was the solution for access to the Oracle JPRT system.

Mark informed the GB that there was an internal prototype of the CSR system in an internal instance of JBS. Unfortunately, it required a few more iterations before it was ready for release. He continued to entertain a March roll-out, but made no guarantees. Doug said he was content with discussion and general progress so far. Mark stated that all changes to JDK 10 interfaces should use the new system. Doug and Mark had a brief discussion about need for a CSR appeals process. Both agreed that one should exist. Mark observed that in 10+ years of existence, the appeals process had never been exercised all the way up.

3. Any other business

No other business was identified.