Commit Graph

137 Commits

Author SHA1 Message Date
Valerie Peng
8969aeb16b Merge 2020-02-12 01:13:55 +00:00
Valerie Peng
fc3b42fc8e 8238898: Missing hash characters for header on license file
Fixed the typos and corrected the formatting

Reviewed-by: weijun
2020-02-12 01:11:59 +00:00
Valerie Peng
1f17842583 8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
Removed killSession() calls in certain impl classes when cancelling operations

Reviewed-by: xuelei
2020-02-12 00:56:27 +00:00
Valerie Peng
efc96d1c07 8236897: Fix the copyright header for pkcs11gcm2.h
Add the "Classpath" exception to existing header

Reviewed-by: weijun
2020-01-10 02:52:25 +00:00
Sean Coffey
a0b8244416 8233801: GCMEmptyIv.java test fails on Solaris 11.4
Reviewed-by: valeriep
2019-11-21 11:31:58 +00:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
2019-11-12 01:36:17 -08:00
Valerie Peng
f14e3a60b2 8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures
Fixed to treat the queried key size values as bits instead of bytes

Reviewed-by: ascarpino, xuelei
2019-10-31 02:22:42 +00:00
Valerie Peng
381e90eb6b 8229243: SunPKCS11-Solaris provider tests failing on Solaris 11.4
For CK_GCM_PARAMS, try the spec definition first before falling back to the header file definition

Reviewed-by: xuelei
2019-10-08 00:01:20 +00:00
Matthias Baesken
0e264cfe36 8231222: fix pkcs11 P11_DEBUG guarded native traces
Reviewed-by: clanger
2019-09-23 17:02:08 +02:00
Valerie Peng
46db25e188 8176837: SunPKCS11 provider needs to check more details on PKCS11 Mechanism
Disable mechanisms with partial support, e.g. can decrypt but cannot encrypt

Reviewed-by: xuelei
2019-09-20 21:33:24 +00:00
Matthias Baesken
2f496251ac 8230861: missing ReleaseStringUTFChars in Java_sun_security_pkcs11_wrapper_PKCS11_connect
Reviewed-by: alanb, stuefe
2019-09-11 16:54:53 +02:00
Valerie Peng
6212473fc4 8228835: Memory leak in PKCS11 provider when using AES GCM
Updated freeCKMechanismPtr to free mechanism-specific memories

Reviewed-by: jnimeh
2019-08-14 01:40:29 +00:00
Valerie Peng
1e0c8e5b26 8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no effect
Fixed to get the MGF digest algorithm from MGF1ParameterSpec

Reviewed-by: xuelei
2019-06-28 19:36:32 +00:00
Aleksey Shipilev
8125b0c2ba 8225695: 32-bit build failures after JDK-8080462 (Update SunPKCS11 provider with PKCS11 v2.40 support)
Reviewed-by: alanb
2019-06-14 10:02:57 +02:00
Valerie Peng
8813b93095 8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
Added support for GCM, PSS, and other mechanisms

Reviewed-by: jnimeh
2019-06-11 21:30:28 +00:00
Martin Balao
0d35ef38e6 8220513: Wrapper Key may get deleted when closing sessions in SunPKCS11 crypto provider
Do not close the session holding the Wrapper Key while in use. Delete the Wrapper Key when no longer needed.

Reviewed-by: valeriep
2019-04-15 15:52:38 -03:00
Valerie Peng
ed87f68640 8213008: Cipher with UNWRAP_MODE should support the generation of an AES key type
Replaced CKK_GENERIC_SECRET with alorithm-specific key type in P11RSACipher unwrap impl

Reviewed-by: ascarpino
2019-03-11 23:48:32 +00:00
Valerie Peng
67ca52873f 8183107: PKCS11 regression regarding checkKeySize
Changed key size check in PKCS11 provider to only enforce positive return values

Reviewed-by: jnimeh
2019-02-27 19:37:51 +00:00
Valerie Peng
9d263d4bc1 8216597: SIGBUS in Java_sun_security_pkcs11_wrapper_PKCS11_getNativeKeyInfo after JDK-6913047
Changed variable declaration type to byte* from long* to fix SIGBUS error

Reviewed-by: ascarpino
2019-02-20 19:16:45 +00:00
Sean Coffey
63663b64d1 8218553: Enhance keystore load debug output
Reviewed-by: weijun
2019-02-07 12:09:17 +00:00
Martin Balao
6cfcdde523 8217088: Disable JDK-6913047 fix (SunPKCS11 memory leak) after JDK-8216597 (SIGBUS error in getNativeKeyInfo)
Disable JDK-6913047 fix (SunPKCS11 memory leak) temporarily until JDK-8216597 (SIGBUS error in getNativeKeyInfo) is fixed.

Reviewed-by: mullan
2019-01-15 19:24:07 -03:00
Jesper Wilhelmsson
a8c5f1e59a Merge 2019-01-15 22:54:09 +01:00
Martin Balao
dfcab1b85a 6913047: Long term memory leak when using PKCS11 and JCE exceeds 32 bit process address space
Extract cryptographic keys within NSS PKCS11 software tokens for memory management purposes.

Reviewed-by: valeriep
2018-11-29 13:36:23 -03:00
Martin Balao
7724fd6d9b 8213154: Update copyright headers of files in src tree that are missing Classpath exception
Reviewed-by: andrew
2018-11-08 18:10:15 -03:00
Mikael Vidstedt
a69f014ad7 8210912: Build error in src/jdk.crypto.cryptoki/share/native/libj2pkcs11/p11_convert.c after JDK-8029661
Reviewed-by: mullan
2018-09-19 09:24:40 -07:00
Martin Balao
aafb2b0474 8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
TLS v1.2 algorithms for key and MAC derivation added to SunPKCS11 crypto provider.

Reviewed-by: valeriep
2018-09-12 13:09:51 +02:00
Jamil Nimeh
b798d67da6 8206295: More reliable p11 transactions
Reviewed-by: valeriep, mschoene, rhalade
2018-08-15 09:36:32 -07:00
Anthony Scarpino
4e46cc1392 8204196: integer cleanup
Reviewed-by: xuelei
2018-07-20 09:55:15 -07:00
Martin Balao
b44c24d290 8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with "NSS initialization failed" on NSS 3.34.1
Reviewed-by: valeriep, weijun
2018-06-26 08:10:45 +08:00
Martin Balao
62c97f695f 8203182: Release session if initialization of SunPKCS11 Signature fails
Ensure session is properly released in P11Signature class

Reviewed-by: valeriep
2018-06-01 19:46:31 +00:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Valerie Peng
171373b021 8197441: Signature#initSign/initVerify for an invalid private/public key fails with ClassCastException for SunPKCS11 provider
Rethrow ClassCastException with InvalidKeyException

Reviewed-by: ascarpino
2018-04-13 18:07:58 +00:00
Adam Petcher
91a1005273 8185292: Stricter key generation
Reviewed-by: mullan
2017-10-24 09:58:27 -04:00
Martin Balao
f1212e26c3 8165996: PKCS11 using NSS throws an error regarding secmod.db when NSS uses sqlite
Reviewed-by: weijun
2017-12-13 01:29:58 +08:00
Valerie Peng
b3f1165f7d 8181048: Refactor existing providers to refer to the same constants for default values for key length
Reviewed-by: mullan, ahgross
2017-07-13 20:41:59 +00:00
Weijun Wang
2bb3b82709 8148371: Remove policytool
Reviewed-by: erikj, alanb, mullan
2017-09-21 16:29:18 +08:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00