stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
55,441 Commits 2 Branches 0 Tags 1.2 GiB
1e0c8e5b26
Commit Graph

171 Commits

Author SHA1 Message Date
Valerie Peng
1e0c8e5b26 8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no effect 
Fixed to get the MGF digest algorithm from MGF1ParameterSpec

Reviewed-by: xuelei
 2019-06-28 19:36:32 +00:00
John Jiang
df6fbdb2af 8224650: Add tests to support X25519 and X448 in TLS 
Reviewed-by: xuelei
 2019-06-28 05:29:54 +08:00
Weijun Wang
a2b3db108a 8225257: sun/security/tools/keytool/PSS.java timed out 
Reviewed-by: valeriep
 2019-06-21 23:44:58 +08:00
Xue-Lei Andrew Fan
dbf62785ef 8225766: Curve in certificate should not affect signature scheme when using TLSv1.3 
Reviewed-by: ascarpino
 2019-06-19 21:49:33 -07:00
Weijun Wang
c12cf04011 8225392: Comparison builds are failing due to cacerts file 
Reviewed-by: erikj, martin, mullan
 2019-06-15 14:39:04 +08:00
Xue-Lei Andrew Fan
a4277e56c8 8224829: AsyncSSLSocketClose.java has timing issue 
Reviewed-by: jnimeh, dfuchs
 2019-06-14 12:19:14 -07:00
Weijun Wang
977870ccea 8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows 
Reviewed-by: mullan
 2019-06-13 23:53:21 +08:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS 
Reviewed-by: xuelei, mullan
 2019-06-12 18:58:00 -07:00
Anthony Scarpino
94e1d7530f 8211018: Session Resumption without Server-Side State 
Reviewed-by: xuelei, jnimeh, jjiang
 2019-06-11 16:31:37 -07:00
Valerie Peng
8813b93095 8080462: Update SunPKCS11 provider with PKCS11 v2.40 support 
Added support for GCM, PSS, and other mechanisms

Reviewed-by: jnimeh
 2019-06-11 21:30:28 +00:00
Philipp Kunz
6d3f5f851e 8221719: Jarsigner fails to verify signed by alias if alias given in wrong case 
Reviewed-by: weijun
 2019-06-10 20:38:15 +08:00
Martin Balao
5aae9ef0db 8215032: Support Kerberos cross-realm referrals (RFC 6806) 
Reviewed-by: weijun
 2019-06-05 01:42:11 -03:00
Alan Bateman
7e14aeb133 8221481: Reimplement the Legacy Socket API 
Reviewed-by: michaelm, chegar
 2019-05-30 07:19:19 +01:00
Arthur Eubanks
acad8d1d68 8224081: SOCKS v4 doesn't work with IPv6 
Reviewed-by: chegar, dfuchs, mullan, vtewari
 2019-05-16 15:58:15 -07:00
Martin Balao
ebf8e1c0ac 8223482: Unsupported ciphersuites may be offered by a TLS client 
Reviewed-by: xuelei
 2019-05-28 19:01:38 -03:00
Rajan Halade
05736da72d 8223499: Remove two DocuSign root certificates that are expiring 
Reviewed-by: mullan
 2019-05-16 12:36:08 -07:00
Rajan Halade
47a39418fa 8222136: Remove two Comodo root CA certificates that are expiring 
Reviewed-by: mullan
 2019-05-15 13:22:29 -07:00
Weijun Wang
0f56400907 8223063: Support CNG RSA keys 
Reviewed-by: mullan
 2019-05-14 08:47:13 +08:00
Christoph Langer
2e3a2d3c83 8223555: Cleanups in cacerts tests 
Reviewed-by: xuelei
 2019-05-10 06:31:09 +01:00
Sean Mullan
10e5d0b854 8191808: Configurable read timeout for CRLs 
Reviewed-by: xuelei, coffeys
 2019-05-09 13:49:08 -04:00
Weijun Wang
2bf347445c 8222987: sun/security/tools/keytool/PSS.java times out on Solaris-SPARC 
Reviewed-by: mullan, xuelei
 2019-05-09 08:49:31 +08:00
John Jiang
34e49a24c0 8204203: Many pkcs11 tests failed in Provider initialization, after compiler on Windows changed 
Build NSS 3.41 with VS2017 and also upgrade to this NSS for macosx

Reviewed-by: valeriep
 2019-05-03 15:57:41 +08:00
Rajan Halade
aba919ab50 8222137: Remove T-Systems root CA certificate 
Reviewed-by: mullan
 2019-04-30 12:53:32 -07:00
Rajan Halade
f08d8b7384 8216577: Add GlobalSign's R6 Root certificate 
Reviewed-by: mullan, clanger
 2019-04-30 11:04:26 -07:00
Martin Balao
11bb97a71c 8222805: sun/security/pkcs11/tls/tls12/TestTLS12.java fails with Unsupported signature algorithm: rsa_pss_rsae_sha256 
Reviewed-by: mullan, xuelei
 2019-04-24 16:25:41 -03:00
Martin Balao
a8a29bbae6 8221271: sun/security/pkcs11/tls/tls12/TestTLS12.java test failed 
Reviewed-by: xuelei
 2019-04-19 10:59:09 -03:00
Weijun Wang
6f032ffbb5 8222275: sun/security/tools/keytool/Serial64.java: assertTrue: expected true, was false 
Reviewed-by: xuelei
 2019-04-14 10:22:56 +08:00
Weijun Wang
15aae2f622 8180573: Refactor sun/security/tools shell tests to plain java tests 
Reviewed-by: rhalade, valeriep
 2019-04-12 13:35:23 +08:00
Valerie Peng
3b6b6b3cb3 8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange 
Add internal Signature init methods to select provider based on both key and parameter

Reviewed-by: xuelei
 2019-04-10 02:35:18 +00:00
Sean Mullan
ae463150c0 8222133: Add temporary exceptions for root certs that are due to expire soon 
Reviewed-by: xuelei
 2019-04-08 13:33:28 -04:00
Sean Mullan
1e6d8fbb1d 8222089: [TESTBUG] sun/security/lib/cacerts/VerifyCACerts.java fails due to cert within 90-day expiry window 
Reviewed-by: xuelei
 2019-04-08 12:19:51 -04:00
Weijun Wang
ae32136711 8221801: Update src/java.base/share/legal/public_suffix.md 
Reviewed-by: xuelei
 2019-04-02 11:05:08 +08:00
Xue-Lei Andrew Fan
2eb8492163 8168261: Use server cipher suites preference by default 
Reviewed-by: mullan
 2019-04-01 16:50:17 -07:00
Weijun Wang
61485b75a9 8221257: Improve serial number generation mechanism for keytool -gencert 
Reviewed-by: xuelei, mullan
 2019-03-30 16:32:23 +08:00
Valerie Peng
e90036145a 8220016: Clean up redundant RSA services in the SunJSSE provider 
Removed duplicated RSA signature/KF/KPG support in SunJSSE

Reviewed-by: xuelei
 2019-03-29 00:39:49 +00:00
Adam Petcher
04a50576cf 8221172: SunEC specific test is not limited to SunEC 
Fixing a minor test bug in the SignatureDigestTruncate regression test

Reviewed-by: mullan
 2019-03-21 13:10:37 -04:00
Martin Balao
0814229ebc 8220753: Re-introduce the test case for TLS 1.2 algorithms in SunPKCS11 crypto provider 
Reviewed-by: xuelei
 2019-03-21 01:51:25 -03:00
Adam Petcher
95b189916f 8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size 
Truncate the digest according to the group order, not the field size

Reviewed-by: jnimeh
 2019-03-19 15:18:35 -04:00
John Jiang
3c34b7a261 8220410: sun/security/tools/jarsigner/warnings/NoTimestampTest.java failed with missing expected output 
Using the same timezone for jar verifying and date formatting

Reviewed-by: weijun
 2019-03-19 10:36:24 +08:00
Xue-Lei Andrew Fan
25f0d60a58 8215430: Remove the internal package com.sun.net.ssl 
Reviewed-by: chegar, mullan, wetmore
 2019-03-01 08:35:14 -08:00
Xue-Lei Andrew Fan
e6f6863cbc 8168069: X509TrustManagerImpl causes ClassLoader leaks with unparseable extensions 
Reviewed-by: mullan
 2019-02-20 18:46:30 -08:00
Xue-Lei Andrew Fan
fca0af0487 8217835: Remove the experimental SunJSSE FIPS compliant mode 
Reviewed-by: mullan
 2019-02-12 13:36:15 -08:00
Weijun Wang
8b83b515b1 8180569: Refactor sun/security/krb5/ shell tests to plain java tests 
Reviewed-by: mullan
 2019-02-11 11:01:00 +08:00
Jesper Wilhelmsson
bc920bd00d Merge 2019-01-22 19:56:19 +01:00
Sean Mullan
c9bea6a8ea 8216280: Allow later Symantec Policy distrust date for two Apple SubCAs 
Reviewed-by: coffeys
 2019-01-22 09:27:19 -05:00
Weijun Wang
1d014da14b 8215694: keytool cannot generate RSASSA-PSS certificates 
Reviewed-by: xuelei
 2019-01-16 11:25:55 +08:00
Weijun Wang
033465d815 8215776: Keytool importkeystore may mix up certificate chain entries when DNs conflict 
Reviewed-by: xuelei
 2019-01-22 21:18:45 +08:00
Weijun Wang
54815061a1 8215937: Check usages of security-related Resources files 
Reviewed-by: mullan
 2019-01-19 09:20:47 +08:00
Jesper Wilhelmsson
cda0d67617 Merge 2019-01-16 20:53:09 +01:00
Weijun Wang
af43646ba3 8215922: jar spec is not precise when describing jar file re-signing 
Reviewed-by: lancea, mullan
 2019-01-15 11:21:00 +08:00