Commit Graph

80 Commits

Author SHA1 Message Date
Vinnie Ryan
005e04bd07 6894643: Separate out dependency on Kerberos
Reviewed-by: alanb, xuelei
2009-11-12 23:00:23 +00:00
Weijun Wang
692684aa31 6890872: keytool -printcert to recognize signed jar files
Reviewed-by: mullan
2009-10-28 15:32:49 +08:00
Weijun Wang
9b3b87dab8 6893158: AP_REQ check should use key version number
Reviewed-by: valeriep, xuelei
2009-10-28 15:32:30 +08:00
Weijun Wang
5e986ae424 6870812: enhance security tools to use ECC algorithms
Reviewed-by: vinnie, mullan
2009-10-21 08:17:35 +08:00
Weijun Wang
2882b91893 6868579: RFE: jarsigner to support reading password from environment variable
Reviewed-by: xuelei, wetmore
2009-10-02 18:49:46 +08:00
Weijun Wang
10b2d33a48 6862679: ESC: AD Authentication with user with umlauts fails
Reviewed-by: valeriep, mullan
2009-10-02 18:47:34 +08:00
Weijun Wang
fcaded312e 6324292: keytool -help is unhelpful
Reviewed-by: xuelei, mullan
2009-10-02 18:44:34 +08:00
Michael McMahon
ef945f9722 6886108: Test case B4933582 binding to fixed port number
Reviewed-by: chegar
2009-09-29 10:00:57 +01:00
Weijun Wang
a4622c3ab0 6885166: regression test for 6877357 (IPv6 address does not work) error (timed out)
Reviewed-by: xuelei
2009-09-24 21:35:34 +08:00
Weijun Wang
938ca04641 6877357: IPv6 address does not work
Reviewed-by: xuelei, alanb
2009-09-22 10:01:32 +08:00
Vinnie Ryan
f13c1a7ce9 6884175: CR cleanup for 6840752: Provide out-of-the-box support for ECC algorithms
Reviewed-by: wetmore
2009-09-21 23:01:42 +01:00
Weijun Wang
58285b80f7 6871847: AlgorithmId.get("SHA256withECDSA") not available
Reviewed-by: vinnie
2009-09-04 14:59:20 +08:00
Weijun Wang
fe71efb327 6876328: different names for the same digest algorithms breaks jarsigner
Reviewed-by: mullan
2009-09-04 14:58:01 +08:00
Weijun Wang
50754f7c2e 6868864: Kerberos tests fail under windows/cygwin
Reviewed-by: wetmore
2009-08-26 12:17:29 +08:00
Vinnie Ryan
f249b36d72 6872048: bad private keys are generated for 2 specific ECC curves
Reviewed-by: wetmore
2009-08-24 18:37:37 +01:00
Weijun Wang
e936496a7b 6875033: regression: test of 6867665 fail
Reviewed-by: xuelei
2009-08-24 18:37:48 +08:00
Weijun Wang
7c86823f01 6867665: Problem with keytabs with multiple kvno's (key versions)
Reviewed-by: valeriep, ohair
2009-08-20 11:24:42 +08:00
Vinnie Ryan
3ed22e2e7a Merge 2009-08-11 16:57:09 +01:00
Vinnie Ryan
59d983ade0 6840752: Provide out-of-the-box support for ECC algorithms
Reviewed-by: alanb, mullan, wetmore
2009-08-11 16:52:26 +01:00
Weijun Wang
be3a1f1294 6821190: more InquireType values for ExtendedGSSContext
Reviewed-by: valeriep
2009-08-11 12:20:32 +08:00
Weijun Wang
50689ce536 6710360: export Kerberos session key to applications
Reviewed-by: valeriep
2009-08-11 12:17:13 +08:00
Weijun Wang
cb2742d7b2 6866479: libzip.so caused JVM to crash when running jarsigner
Reviewed-by: mullan
2009-08-11 12:15:24 +08:00
Bradford Wetmore
fc188b8b29 6867657: Many JSN tests do not run under cygwin
Reviewed-by: ohair
2009-08-06 17:56:59 -07:00
Weijun Wang
3fef36803a 6867687: keytool's standard.sh test timeout sometimes
Reviewed-by: xuelei
2009-08-02 13:40:03 +08:00
Weijun Wang
bdafe7ca74 6867231: Regression: jdk/test/sun/security/krb5/ConfPlusProp.java error against jdk7/pit/b68
Reviewed-by: xuelei
2009-07-31 16:21:30 +08:00
Weijun Wang
945ec03563 6561126: keytool should use larger default keysize for keypairs
Reviewed-by: mullan
2009-07-22 16:41:14 +08:00
Weijun Wang
20ee77e0d0 6847026: keytool should be able to generate certreq and cert without subject name
Reviewed-by: xuelei
2009-07-22 16:40:04 +08:00
Weijun Wang
f1b3e33db7 6858589: more changes to Config on system properties
Reviewed-by: valeriep
2009-07-22 16:39:34 +08:00
Tim Bell
a2d17d381e Merge 2009-07-13 23:58:49 -07:00
Weijun Wang
9148ed61cf 6857795: krb5.conf ignored if system properties on realm and kdc are provided
Reviewed-by: xuelei
2009-07-08 12:07:43 +08:00
Weijun Wang
96a8d1a9f8 6857802: GSS getRemainingInitLifetime method returns milliseconds not seconds
Reviewed-by: xuelei
2009-07-08 12:07:16 +08:00
Andy Herrick
14323dd4c7 Merge 2009-07-06 14:10:31 -04:00
Weijun Wang
c9930b0e4f 6855671: DerOutputStream encodes negative integer incorrectly
Reviewed-by: xuelei
2009-06-30 11:55:58 +08:00
Andy Herrick
974a4682e4 Merge 2009-06-29 12:06:42 -04:00
Weijun Wang
1d5c589340 6851973: ignore incoming channel binding if acceptor does not set one
Reviewed-by: valeriep
2009-06-19 18:03:27 +08:00
Weijun Wang
f5d1fbc0b4 6712755: jarsigner fails to sign itextasian.jar since 1.5.0_b14, it works with 1.5.0_13
Reviewed-by: mullan
2009-06-18 11:12:13 +08:00
Weijun Wang
7b2694f5b3 6849275: enhance krb5 reg tests
Reviewed-by: xuelei
2009-06-17 15:26:58 +08:00
Andy Herrick
e487e25584 6797688: Umbrella: Merge all JDK 6u4 - 6u12 deployment code into JDK7
6845973: Update JDK7 with deployment changes in 6u13, 6u14
4802695: Support 64-bit Java Plug-in and Java webstart on Windows/Linux on AMD64
6825019: DownloadManager should not be loaded and referenced for full JRE
6738770: REGRESSION:JSException throws when use LiveConnect javascript facility
6772884: plugin2 : java.lang.OutOfMemoryError or crash
6707535: Crossing domain hole affecting multiple sites/domains using plug-in
6728071: Non-verification of Update files may allow unintended updates
6704154: Code loaded from local filesystem should not get access to localhost
6727081: Web Start security restrictions bypass using special extension jnlp
6727079: Java Web Start Socket() restriction bypass
6727071: Cache location/user name information disclosure in SingleInstanceImpl
6716217: AppletClassLoader adds permissions based on codebase regardless of CS
6694892: Java Webstart inclusion via system properties override [CVE-2008-2086]
6704074: localhost socket access due to cache location exposed
6703909: Java webstart arbitrary file creation using nativelib
6665315: browser crashes when deployment.properties has more slashes ( / )
6660121: Encoding values in JNLP files can cause buffer overflow
6606110: URLConnection.setProxiedHost for resources that are loaded via proxy
6581221: SSV(VISTA): Redirection FAILS to work if user does a downgrade install
6609756: Buffer Overflow in Java ActiveX component
6608712: Bypassing the same origin policy in Java with crafted names
6534630: "gnumake clobber" doesn't
6849953: JDK7 - replacement of bufferoverflowU.lib on amd64 breaks build
6849029: Need some JDK7 merge clean-up after comments on the webrev
6847582: Build problem on JDK7 with isSecureProperty in merge
6827935: JDK 7 deployment merging - problem in Compiler-msvm.gmk
6823215: latest merge fixes from 6u12 -> JDK7
6816153: further mergers for JDK7 deployment integration
6807074: Fix Java Kernel and JQS in initial JDK7 builds

Initial changeset for implementing 6uX Deployment Features into JDK7

Reviewed-by: dgu, billyh
2009-06-12 14:56:32 -04:00
Weijun Wang
8a52d1a9d5 6578647: Undefined requesting URL in java.net.Authenticator.getPasswordAuthentication()
Reviewed-by: chegar, valeriep
2009-06-09 14:17:05 +08:00
Xue-Lei Andrew Fan
5f228867b6 6822460: support self-issued certificate
Checking self-issued certificate during certification path building

Reviewed-by: mullan, weijun
2009-05-26 16:19:18 +08:00
Weijun Wang
04e56f7701 6682516: SPNEGO_HTTP_AUTH/WWW_KRB and SPNEGO_HTTP_AUTH/WWW_SPNEGO failed on all non-windows platforms
Reviewed-by: xuelei
2009-05-20 10:12:00 +08:00
Weijun Wang
2827ff39e5 6714845: Quotes in Kerberos configuration file are included in the values
Reviewed-by: xuelei
2009-04-09 15:32:55 +08:00
Weijun Wang
67bb035b94 4811968: ASN.1 (X509Certificate) implementations don't handle large OID components
Reviewed-by: xuelei
2009-04-08 13:54:34 +08:00
Weijun Wang
b01525e89b 6825352: support self-issued certificate in keytool
Reviewed-by: xuelei
2009-04-03 11:36:19 +08:00
Weijun Wang
739414c177 6802846: jarsigner needs enhanced cert validation(options)
Reviewed-by: xuelei
2009-03-27 11:05:45 +08:00
Weijun Wang
827d425560 6819272: keytool -importcert should read the whole input
Reviewed-by: xuelei
2009-03-19 11:17:06 +08:00
Weijun Wang
78ae650f8f 6815182: GSSAPI/SPNEGO does not work with server using MIT Kerberos library
Reviewed-by: valeriep
2009-03-13 09:20:56 +08:00
Weijun Wang
5f12c03c56 6813402: keytool cannot -printcert entries without extensions
Reviewed-by: xuelei
2009-03-05 14:49:55 +08:00
Xue-Lei Andrew Fan
d1f800c577 5067458: Loopback SSLSocketImpl createSocket is throwing an exception
A null hostname should be regarded as a loopback address.

Reviewed-by: weijun
2009-02-23 17:32:52 +08:00
Weijun Wang
3a37d195f3 6780416: New keytool commands/options: -gencert, -printcertreq, -ext
Reviewed-by: xuelei, mullan
2009-02-23 10:05:55 +08:00