Commit Graph

425 Commits

Author SHA1 Message Date
Stephen Flores
c39030c7b3 7194075: Various classes of sunec.jar are duplicated in rt.jar
Reviewed-by: mullan, vinnie
2013-05-14 18:08:18 +01:00
Valerie Peng
fe625d26a3 Merge 2013-05-13 16:52:33 -07:00
Anthony Scarpino
2c0b00cbe0 8001284: Buffer problems with SunPKCS11-Solaris and CKM_AES_CTR
Changed output length calculation to include incomplete blocks for CTR mode.

Reviewed-by: valeriep
2013-05-07 14:13:53 -07:00
Valerie Peng
94c8fa5cb1 7196009: SunPkcs11 provider fails to parse config path containing parenthesis
Enhanced to allow quoted string as library path values.

Reviewed-by: weijun
2013-05-07 14:06:19 -07:00
Weijun Wang
5ec35be1d2 8010192: Enable native JGSS provider on Mac
Reviewed-by: valeriep
2013-05-07 12:30:36 +08:00
Jason Uh
b762ba9ab4 8005922: TEST_BUG: There is no /tmp directory for windows system
Reviewed-by: weijun
2013-05-03 15:04:54 -07:00
Jason Uh
33196b314d 8007699: Move some tests from test/sun/security/provider/certpath/X509CertPath to closed repo
Reviewed-by: mullan
2013-05-09 12:00:46 -07:00
Weijun Wang
0c02ab3a5e 8012679: Let allow_weak_crypto default to false
Reviewed-by: valeriep
2013-05-08 08:25:34 +08:00
Weijun Wang
905250cdfe 8012082: SASL: auth-conf negotiated, but unencrypted data is accepted, reset to unencrypt
Reviewed-by: vinnie
2013-05-01 21:05:10 +08:00
Weijun Wang
70b23a07be 8005523: Unbound krb5 for TLS
Reviewed-by: xuelei
2013-04-27 18:25:16 +08:00
Alan Bateman
d51ab5c39c 8012530: test/sun/security/provider/SecureRandom/StrongSeedReader.java failing
Reviewed-by: wetmore
2013-04-25 17:10:36 -07:00
Weijun Wang
0ec3fd796b 8005527: [TEST_BUG] console.sh failed Automatically with exit code 1
Reviewed-by: xuelei
2013-04-22 11:39:53 +08:00
Weijun Wang
ab7ecdd1b3 8009636: JARSigner including TimeStamp PolicyID (TSAPolicyID) as defined in RFC3161
Reviewed-by: mullan
2013-04-19 15:41:11 +08:00
Vinnie Ryan
74d720c7b5 Merge 2013-04-17 02:53:02 -07:00
Weijun Wang
dfcf6055a7 8011124: Make KerberosTime immutable
Reviewed-by: xuelei
2013-04-17 10:15:33 +08:00
Bradford Wetmore
63a6638ebf 6425477: Better support for generation of high entropy random numbers
Reviewed-by: xuelei, weijun, mullan
2013-04-11 21:03:24 -07:00
Xue-Lei Andrew Fan
a973a4d533 8011680: Re-integrate AEAD implementation of JSSE
It is a re-merge of JDK-7030966.

Reviewed-by: wetmore
2013-04-11 18:57:14 -07:00
Weijun Wang
b02989edef 8011867: Accept unknown PKCS #9 attributes
Reviewed-by: vinnie
2013-04-11 11:09:50 +08:00
Weijun Wang
7d8e86633a 8005460: [findbugs] Probably returned array should be cloned
Reviewed-by: xuelei
2013-04-11 10:58:17 +08:00
Weijun Wang
4a64ecdf42 8010125: keytool -importkeystore could create a pkcs12 keystore with different storepass and keypass
Reviewed-by: vinnie
2013-03-28 20:27:53 +08:00
Weijun Wang
5f08966515 8009875: Provide a default udp_preference_limit for krb5.conf
Reviewed-by: valeriep
2013-03-23 11:49:39 +08:00
Lana Steuck
31330fc47a Merge 2013-03-12 19:04:49 -07:00
Bradford Wetmore
9e5da0ad31 8009925: Back out AEAD CipherSuites temporarily
Reviewed-by: valeriep
2013-03-12 15:31:49 -07:00
Weijun Wang
2ec1224ff0 8000653: SPNEGO tests fail at context.getDelegCred().getRemainingInitLifetime(mechOid)
Reviewed-by: valeriep
2013-03-09 17:27:58 +08:00
Sean Mullan
6190b5040a Merge 2013-03-01 16:15:23 -05:00
Sean Mullan
6cd495e473 8008908: Access denied when invoking Subject.doAsPrivileged()
Wildcard principal names are not processed correctly

Reviewed-by: xuelei
2013-03-01 16:12:50 -05:00
Xue-Lei Andrew Fan
9abb185430 7030966: Support AEAD CipherSuites
Reviewed-by: weijun, wetmore, valeriep
2013-03-01 02:34:34 -08:00
Edvard Wendelin
2f5be3ab0d Merge 2013-02-25 08:44:00 +01:00
Mark Sheppard
ec9e303630 8006182: cleanup to use java.util.Base64 in java security component, providers, and regression tests
Refactored code to use java.util.Base64 Mime Encoder and Decoder as a replacement for sun.misc.BASE64Encoder and sun.misc.BASE64Decoder

Reviewed-by: vinnie, chegar, sherman
2013-02-21 20:01:22 +00:00
Edvard Wendelin
cbfc80d987 Merge 2013-02-19 21:48:01 +01:00
David Holmes
390cc1d7a1 Merge 2013-02-17 16:44:19 -05:00
Vinnie Ryan
8f58ebc261 8007755: Support the logical grouping of keystores
Reviewed-by: mullan
2013-02-13 19:40:51 +00:00
Weijun Wang
d8233ec657 8001104: Unbound SASL service: the GSSAPI/krb5 mech
Reviewed-by: valeriep
2013-02-09 16:43:49 +08:00
Edvard Wendelin
11036fb4d5 Merge 2013-02-05 15:35:35 +01:00
Vinnie Ryan
85c0519ca6 8007483: attributes are ignored when loading keys from a PKCS12 keystore
Reviewed-by: mullan
2013-02-05 14:25:47 +00:00
David Holmes
eb1726c151 Merge 2013-02-04 18:08:50 -05:00
Vinnie Ryan
ddbfa5fe53 8006994: Cleanup PKCS12 tests to ensure streams get closed
Reviewed-by: mullan
2013-02-04 17:20:26 +00:00
Weijun Wang
0c6cb9cdc2 8006564: Test sun/security/util/Oid/S11N.sh fails with timeout on Linux 32-bit
Reviewed-by: alanb
2013-02-01 07:39:41 +08:00
Vinnie Ryan
3727e751f6 8006855: PKCS12 test failures due to unsupported algorithm
Reviewed-by: mullan
2013-01-24 16:44:15 +00:00
Vinnie Ryan
b680bc8ca7 8005408: KeyStore API enhancements
Reviewed-by: mullan
2013-01-23 23:13:54 +00:00
Chris Hegarty
12e480040a 8006669: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/PostThruProxy.sh fails on mac
Reviewed-by: alanb
2013-01-23 14:45:44 +00:00
Alan Bateman
a23a1a942b 8004502: Compact Profiles contents
Reviewed-by: dholmes, mchung
2013-01-21 23:35:36 -05:00
Jason Uh
3d92cb12a6 8006092: SecurityPermission: printIdentity doesn't exist
Reviewed-by: weijun
2013-01-21 15:05:49 +08:00
Jason Uh
5d2a6972af 8005939: sun/security/x509/{X509CRLImplX509CertImpl}/Verify.java fail in confusing way when some providers not present
Reviewed-by: mullan, weijun
2013-01-16 13:35:17 -05:00
Jason Uh
68eb431db8 8005389: Backout fix for JDK-6500133
Reviewed-by: mullan
2013-01-16 09:51:21 -05:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697 Merge 2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815 Merge 2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac 7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator
Add new java.security.Principal.implies method

Reviewed-by: alanb
2013-01-08 19:00:12 -05:00
Weijun Wang
d9c892c9fd 8005447: default principal should act as anyone
Reviewed-by: valeriep
2013-01-08 14:54:56 +08:00
Lana Steuck
b7af263526 Merge 2012-12-28 18:36:41 -08:00
Xue-Lei Andrew Fan
6d41a58c82 7109274: Restrict the use of certificates with RSA keys less than 1024 bits
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.

Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
David Katleman
306cab1006 8004982: JDK8 source with GPL header errors
Reviewed-by: ohair
2012-12-20 16:24:50 -08:00
Weijun Wang
5ded9d47a1 7197159: accept different kvno if there no match
Reviewed-by: xuelei
2012-12-17 12:18:46 +08:00
Mark Sheppard
c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Jason Uh
e3c39dffe5 7193792: sun/security/pkcs11/ec/TestECDSA.java failing intermittently
Reviewed-by: vinnie, wetmore
2012-12-13 09:35:35 -05:00
Weijun Wang
2be2f20b65 8004488: wrong permissions checked in krb5
Reviewed-by: xuelei
2012-12-11 13:14:56 +08:00
Edvard Wendelin
f92370665e Merge 2013-02-03 23:25:38 +01:00
Xue-Lei Andrew Fan
eb66ce8b2e 8004184: security tests leave JSSEServer running
Use othervm mode to release resources,  and correct the system properties issues in JSSE

Reviewed-by: chegar
2012-12-03 06:00:19 -08:00
Weijun Wang
fdd109b467 7198507: [TEST_BUG] sun/security/tools/keytool/console.sh should be rewritten
Reviewed-by: xuelei
2012-12-03 17:14:03 +08:00
Weijun Wang
2aea4cbc8c 8002344: Krb5LoginModule config class does not return proper KDC list from DNS
Co-authored-by: Severin Gehwolf <sgehwolf@redhat.com>
Reviewed-by: weijun
2012-11-19 11:13:08 +08:00
Xue-Lei Andrew Fan
d0e329751f 8001569: Regression test GetPeerHost uses static port number
Reviewed-by: weijun
2012-11-09 01:15:04 -08:00
Jason Uh
fdfd7968f7 7198416: CertificateIssuerName and CertificateSubjectName are redundant
Reviewed-by: mullan
2012-11-08 12:51:25 -05:00
Weijun Wang
5fca8126cd 6355584: Introduce constrained Kerberos delegation
Reviewed-by: valeriep
2012-11-07 14:13:01 +08:00
Alan Bateman
430592a30e 7197491: update copyright year to match last edit in jdk8 jdk repository
Reviewed-by: chegar, ksrini
2012-11-02 15:50:11 +00:00
Weijun Wang
a60d4fd720 7110803: SASL service for multiple hostnames
Reviewed-by: mullan
2012-11-02 10:48:04 +08:00
Weijun Wang
14364d11d2 7195426: kdc_default_options not supported correctly
Reviewed-by: xuelei
2012-10-29 14:14:07 +08:00
Weijun Wang
620f0e5006 7184246: Simplify Config.get() of krb5
Reviewed-by: xuelei
2012-10-29 14:14:06 +08:00
Abhijit Saha
1cb7e050ff Merge 2012-10-26 10:01:13 -07:00
Xue-Lei Andrew Fan
b01d15feb0 8001466: Nightly regression test failure of SSLSocketSNISensitive.java
Reviewed-by: weijun
2012-10-24 08:25:29 -07:00
Weijun Wang
8744fd02bd 8001208: Fix for KRB5CCNAME not complete
Reviewed-by: xuelei
2012-10-23 10:02:23 +08:00
Xue-Lei Andrew Fan
1892ebf911 7068321: Support TLS Server Name Indication (SNI) Extension in JSSE Server
Reviewed-by: mullan, weijun, wetmore
2012-10-18 01:14:00 -07:00
Stephen Flores
037bcf1683 7194449: String resources for Key Tool and Policy Tool should be in their respective packages
Reviewed-by: alanb, weijun, mullan
2012-10-14 22:58:59 +01:00
Weijun Wang
a5312cbadb 7201053: Krb5LoginModule shows NPE when both useTicketCache and storeKey are set to true
Reviewed-by: mullan
2012-10-08 10:42:43 +08:00
Xue-Lei Andrew Fan
c8ebc97b44 7192392: Better validation of client keys
Also reviewed by Andrew Gross<Andrew.Gross@Oracle.COM>

Reviewed-by: vinnie
2012-10-22 07:28:51 -07:00
Valerie Peng
a431f9851d 7044060: Need to support NSA Suite B Cryptography algorithms
Add support for DSA parameter generation and OIDs for NSA Suite B algorithms.

Reviewed-by: vinnie
2012-09-04 18:41:06 -07:00
Eric Wang
e0782017fe 7195733: TEST_BUG: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/B6216082.java failing
Reviewed-by: chegar, alanb, xuelei
2012-09-04 02:24:51 -07:00
Vinnie Ryan
1ad2cb3303 7133495: [macosx] KeyChain KeyStore implementation retrieves only one private key entry
Reviewed-by: weijun
2012-02-14 11:18:32 +00:00
Alan Bateman
30d429cc25 8000268: sun/security/provider/X509Factory/BigCRL.java failing on Linux 32-bit
Reviewed-by: mullan
2012-10-02 12:23:16 +01:00
Weijun Wang
7ffcd7343f 7200682: TEST_BUG: keytool/autotest.sh still has problems with libsoftokn.so
Reviewed-by: alanb, smarks
2012-09-28 17:15:48 +08:00
Xue-Lei Andrew Fan
9c642ad1d2 7200295: CertificateRequest message is wrapping when using large numbers of Certs
Reviewed-by: wetmore
2012-09-26 21:05:40 -07:00
Weijun Wang
b86fae01ab 7196855: autotest.sh fails on ubuntu because libsoftokn.so not found
Reviewed-by: vinnie
2012-09-17 18:19:16 +08:00
John Zavgren
8fbd047f8c 6354758: rename old test HttpServer classes
Reviewed-by: chegar, michaelm, khazra
2012-09-07 15:30:17 +01:00
Stephen Flores
8081077ff5 6995421: Eliminate the static dependency to sun.security.ec.ECKeyFactory
Reviewed-by: mullan, vinnie
2012-08-30 14:40:57 -07:00
Weijun Wang
f7c2d784ae 7194472: FileKeyTab.java test fails on Windows
Reviewed-by: alanb
2012-08-28 17:25:07 +08:00
Weijun Wang
66f06a99dc 7152121: Krb5LoginModule no longer handles keyTabNames with "file:" prefix
Reviewed-by: mullan
2012-08-27 10:23:43 +08:00
Weijun Wang
d35a91d60d 7192202: Make sure keytool prints both unknown and unparseable extensions
Reviewed-by: mullan
2012-08-20 07:59:26 +08:00
Jason Uh
630647752a 6500133: REGRESSION: CertificateParsingException for CRL Distribution Point with blank
Reviewed-by: mullan
2012-08-17 14:32:50 -04:00
Vinnie Ryan
790c4cdcec 7190945: pkcs11 problem loading NSS libs on Ubuntu
Reviewed-by: xuelei, alanb
2012-08-13 14:06:44 +01:00
Jason Uh
1bbbba58c1 7026347: Certificate and X509CRL should have verify(PublicKey key, Provider sigProvider)
Reviewed-by: mullan, xuelei, weijun
2012-08-02 10:40:24 -04:00
Weijun Wang
cac7fc8e12 7187051: ShortRSAKeynnn.sh tests should do cleanup before start test
Reviewed-by: xuelei
2012-07-26 20:38:44 +08:00
Weijun Wang
3db0a0443c 7178649: TEST BUG: BadKdc3.java needs improvement to ignore the unlikely but possible timeout
Reviewed-by: xuelei
2012-07-21 19:56:55 +08:00
Weijun Wang
53170d594f 7180907: Jarsigner -verify fails if rsa file used sha-256 with authenticated attributes
Reviewed-by: xuelei
2012-07-21 19:56:53 +08:00
Weijun Wang
d7f3ef3fb7 7102106: TEST_BUG: sun/security/util/Oid/S11N.sh should be modified
Reviewed-by: mullan
2012-07-17 11:57:37 +08:00
Weijun Wang
8c0bafddc3 7183203: ShortRSAKeynnn.sh tests intermittent failure
Reviewed-by: xuelei
2012-07-17 11:28:16 +08:00
Vinnie Ryan
b530224aad 6880559: Enable PKCS11 64-bit windows builds
Reviewed-by: valeriep
2012-07-16 22:38:49 +01:00
Weijun Wang
3e4ca7604b 6966259: Make PrincipalName and Realm immutable
Reviewed-by: xuelei
2012-07-11 17:10:34 +08:00
Xue-Lei Andrew Fan
046f2c92e2 7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
Reviewed-by: weijun
2012-07-03 20:29:16 -07:00
Lana Steuck
e51eadc837 Merge 2012-06-26 10:57:46 -07:00
Weijun Wang
911aeb6828 7176574: sun/security/krb5/auto/TcpTimeout.java failed with solaris-i586
Reviewed-by: chegar
2012-06-13 19:23:23 +08:00