655 Commits

Author SHA1 Message Date
Weijun Wang
2fa98fdbd7 6987827: security/util/Resources.java needs improvement
Reviewed-by: valeriep
2010-11-11 15:51:12 +08:00
Weijun Wang
5b6c23c809 6952519: kdc_timeout is not being honoured when using TCP
Reviewed-by: valeriep
2010-11-09 08:34:11 +08:00
Weijun Wang
42b61014b3 6997740: ktab entry related test compilation error
Reviewed-by: valeriep
2010-11-06 09:11:18 +08:00
Xue-Lei Andrew Fan
f685cc171a 6916074: Add support for TLS 1.2
6985179: To support Server Name Indication extension for JSSE client

Introduces the algorithm constraints to support signature and hash algorithm selection. Includes contributions from wetmore and weijung.

Reviewed-by: wetmore, weijun
2010-11-01 22:02:35 -07:00
Xue-Lei Andrew Fan
aab01a90d7 4873188: Support TLS 1.1
Reviewed-by: wetmore, weijun
2010-10-30 18:39:17 +08:00
Weijun Wang
d2ef113186 6950546: "ktab -d name etype" to "ktab -d name [-e etype] [kvno | all | old]"
6984764: kerberos fails if service side keytab is generated using JDK ktab

Reviewed-by: valeriep
2010-10-28 21:14:44 +08:00
Chris Hegarty
0615bd9a48 Merge 2010-10-08 11:27:55 +01:00
Lana Steuck
53e6cf8989 Merge 2010-09-25 12:00:05 -07:00
Weijun Wang
b32aa9d2d5 6986868: TEST failure: sun/security/tools/jarsigner/crl.sh
Reviewed-by: ohair
2010-09-25 10:21:30 +08:00
Lana Steuck
a682d9348d Merge 2010-09-16 11:19:43 -07:00
Weijun Wang
ce46bf1737 6982840: sun/security/tools/jarsigner/emptymanifest.sh fails
Reviewed-by: dholmes
2010-09-14 10:18:16 +08:00
Kelly O'Hair
f7e31fc6c2 6982137: Rebranding pass 2 - missed copyright changes
Reviewed-by: mbykov
2010-09-09 16:26:46 -07:00
Weijun Wang
34198dbc4c 6976536: Solaris JREs do not have the krb5.kdc.bad.policy configured by default
Reviewed-by: valeriep
2010-08-19 11:26:32 +08:00
Chris Hegarty
784f62993b 6973030: NTLM proxy authentication fails with https
Reviewed-by: michaelm
2010-08-03 12:03:03 +01:00
Weijun Wang
9d92d626e3 6972005: ConfPlusProp.java test failure when DNS has info for realm
Reviewed-by: xuelei
2010-07-26 17:21:51 +08:00
Xue-Lei Andrew Fan
f5561769de 6867345: Turkish regional options cause NPE in sun.security.x509.AlgorithmId.algOID
Reviewed-by: mullan, weijun
2010-07-24 22:59:41 +08:00
Abhijit Saha
1e52a8c736 Merge 2010-07-16 09:26:55 -07:00
Weijun Wang
c20e1ffd6c 6670889: Keystore created under Hindi Locale causing ArrayIndexOutOfBoundsException
Reviewed-by: chegar
2010-07-13 20:27:01 +08:00
Abhijit Saha
97d968d3ff Merge 2010-06-24 10:56:00 -07:00
Weijun Wang
c93ecb6623 6946669: SSL/Krb5 should not call EncryptedData.reset(data, false)
Reviewed-by: xuelei
2010-06-24 14:26:35 +08:00
Weijun Wang
6426b52076 6844907: krb5 etype order should be from strong to weak
Reviewed-by: valeriep
2010-06-24 14:26:28 +08:00
Weijun Wang
4bdcad4b69 6958026: Problem with PKCS12 keystore
Reviewed-by: mullan
2010-06-24 14:26:22 +08:00
Weijun Wang
5141220c5e 6959292: regression: cannot login if session key and preauth does not use the same etype
Reviewed-by: xuelei, valeriep
2010-06-17 13:46:15 +08:00
Xue-Lei Andrew Fan
53a219bfee 6914943: Implement final TLS renegotiation fix
RFC 5746 implementation

Reviewed-by: wetmore, weijun
2010-06-12 00:42:51 -07:00
Weijun Wang
b0277a9631 6958869: regression: PKIXValidator fails when multiple trust anchors have same dn
Reviewed-by: xuelei, wetmore, mullan
2010-06-11 11:38:36 +08:00
Weijun Wang
2d9fcecd29 6951366: kerberos login failure on win2008 with AD set to win2000 compat mode
Reviewed-by: valeriep, xuelei
2010-06-04 19:28:53 +08:00
Weijun Wang
141897fe19 6950931: test fails on windows sun/security/tools/jarsigner/crl.sh
Reviewed-by: wetmore, xuelei
2010-06-01 10:52:42 +08:00
Lana Steuck
fd45b4188c Merge 2010-05-28 12:10:14 -07:00
Kelly O'Hair
fe008ae27a 6943119: Rebrand source copyright notices
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
Weijun Wang
235a3e379c 6948287: KDC test strange knvo
Reviewed-by: xuelei
2010-05-25 18:20:54 +08:00
Weijun Wang
480f0af4e8 6932525: Incorrect encryption types of KDC_REQ_BODY of AS-REQ with pre-authentication
Reviewed-by: valeriep
2010-05-24 10:05:04 +08:00
Weijun Wang
a7fbe2d858 6882687: KerberosTime too imprecise
Reviewed-by: valeriep
2010-05-24 09:37:02 +08:00
Weijun Wang
874ec0972c 6948803: CertPath validation regression caused by SHA1 replacement root and MD2 disable feature
Reviewed-by: xuelei, mullan
2010-05-24 09:28:06 +08:00
Weijun Wang
7c6813eb7a 6890876: jarsigner can add CRL info into signed jar
Reviewed-by: mullan
2010-05-06 13:42:52 +08:00
Weijun Wang
a94d06f6b7 6948909: Jarsigner removes MANIFEST.MF info for badly packages jar's
Reviewed-by: mullan, xuelei
2010-05-06 11:26:16 +08:00
Weijun Wang
20fbeb53cd 6844193: support max_retries in krb5.conf
Reviewed-by: valeriep
2010-04-29 15:51:10 +08:00
Weijun Wang
7cc72590c7 6856069: PrincipalName.clone() does not invoke super.clone()
Reviewed-by: chegar
2010-04-22 12:45:36 +08:00
Weijun Wang
5d137e0d2f 6944847: native gss lib names on linux
Reviewed-by: valeriep
2010-04-20 19:30:31 +08:00
Weijun Wang
592e8de4e1 6939248: Jarsigner can't extract Extended Key Usage from Timestamp Reply correctly
Reviewed-by: xuelei, mullan
2010-04-16 10:13:23 +08:00
Weijun Wang
7afbc895a8 6937978: let keytool -gencert generate the chain
Reviewed-by: mullan
2010-04-16 10:06:07 +08:00
Chris Hegarty
61ab8e5bfd 6943219: test/sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/DNSIdentities.java fail in linux
Reviewed-by: andrew
2010-04-15 16:37:16 +01:00
Xue-Lei Andrew Fan
52e1e32cdb 6941936: Broken pipe error of test case DNSIdentities.java
Reviewed-by: chegar
2010-04-10 09:13:12 +08:00
Abhijit Saha
39f32d7819 Merge 2010-03-29 07:17:02 -07:00
Xue-Lei Andrew Fan
0f50eeb222 6693917: regression tests need to update for supporting ECC on solaris 11
Reviewed-by: weijun
2010-03-29 13:27:25 +08:00
Abhijit Saha
4e39344d24 Merge 2010-03-24 17:32:04 -07:00
Abhijit Saha
b60d36a19a Merge 2010-03-24 14:16:57 -07:00
Chris Hegarty
498067c8a3 6614957: HttpsURLConnection not using the set SSLSocketFactory for creating all its Sockets
6771432: createSocket() - smpatch fails using 1.6.0_10 because of "Unconnected sockets not implemented"
6766775: X509 certificate hostname checking is broken in JDK1.6.0_10

All three bugs are interdependent

Reviewed-by: xuelei
2010-03-23 13:54:36 +00:00
Valerie Peng
b05376b108 6837847: PKCS#11 A SecureRandom and a serialization error following installation of 1.5.0_18
Added a custom readObject method to PKCS11 SecureRandom impl

Reviewed-by: wetmore
2010-03-18 17:56:39 -07:00
Valerie Peng
c0cdafcd43 6695485: SignedObject constructor throws ProviderException if it's called using provider "SunPKCS11-Solaris"
Added checking for RSA key lengths in initSign and initVerify

Reviewed-by: vinnie
2010-03-18 17:05:42 -07:00
Weijun Wang
23a0fee518 6829283: HTTP/Negotiate: Autheticator triggered again when user cancels the first one
Reviewed-by: chegar
2010-03-18 18:26:37 +08:00