Sean Mullan
23d61e9b45
8023362: Don't allow soft-fail behavior if OCSP responder returns "unauthorized"
...
Reviewed-by: vinnie, xuelei
2013-09-06 12:04:18 -04:00
Sean Mullan
7474815db8
Merge
2013-08-02 08:37:25 -04:00
Sean Mullan
0844d3e77b
8001319: Add SecurityPermission "insertProvider" target name
...
Reviewed-by: vinnie
2013-08-02 08:30:46 -04:00
Sean Mullan
5c30826657
Merge
2013-07-25 11:09:28 -04:00
Sean Mullan
74a0cc9f37
8010748: Add PKIXRevocationChecker NO_FALLBACK option and improve SOFT_FAIL option
...
Reviewed-by: vinnie
2013-07-25 10:58:00 -04:00
Vinnie Ryan
3300eed0bb
8019627: RuntimeException gets obscured during OCSP cert revocation checking
...
Reviewed-by: mullan
2013-07-12 20:44:34 +01:00
Vinnie Ryan
53ecefacac
8019259: Failover to CRL checking does not happen if wrong OCSP responder URL is set
...
Reviewed-by: xuelei
2013-07-01 14:39:47 +01:00
Weijun Wang
af996219c7
8001326: Improve Kerberos caching
...
Reviewed-by: valeriep
2013-06-21 18:26:13 +08:00
Deven You
c778d84388
8014620: Signature.getAlgorithm return null in special case
...
Reviewed-by: wetmore
2013-06-17 17:36:20 -07:00
Jeff Nisewanger
c0c2397857
8014097: add doPrivileged methods with limited privilege scope
...
Reviewed-by: mchung
2013-06-04 15:33:42 -07:00
David Holmes
390cc1d7a1
Merge
2013-02-17 16:44:19 -05:00
Vinnie Ryan
3d55cc1e02
8007934: algorithm parameters for PBE Scheme 2 not decoded correctly in PKCS12 keystore
...
Reviewed-by: mullan
2013-02-13 16:01:26 +00:00
David Holmes
eb1726c151
Merge
2013-02-04 18:08:50 -05:00
Vinnie Ryan
ddbfa5fe53
8006994: Cleanup PKCS12 tests to ensure streams get closed
...
Reviewed-by: mullan
2013-02-04 17:20:26 +00:00
Vinnie Ryan
3727e751f6
8006855: PKCS12 test failures due to unsupported algorithm
...
Reviewed-by: mullan
2013-01-24 16:44:15 +00:00
Vinnie Ryan
7dcd0b38a8
8006591: Protect keystore entries using stronger PBE algorithms
...
Reviewed-by: mullan
2013-01-23 21:25:49 +00:00
Alan Bateman
a23a1a942b
8004502: Compact Profiles contents
...
Reviewed-by: dholmes, mchung
2013-01-21 23:35:36 -05:00
Alan Bateman
c12b624078
8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
...
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697
Merge
2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815
Merge
2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac
7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator
...
Add new java.security.Principal.implies method
Reviewed-by: alanb
2013-01-08 19:00:12 -05:00
Lana Steuck
b7af263526
Merge
2012-12-28 18:36:41 -08:00
Xue-Lei Andrew Fan
6d41a58c82
7109274: Restrict the use of certificates with RSA keys less than 1024 bits
...
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.
Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
David Katleman
306cab1006
8004982: JDK8 source with GPL header errors
...
Reviewed-by: ohair
2012-12-20 16:24:50 -08:00
Mark Sheppard
c9063f559f
8003890: corelibs test scripts should pass TESTVMOPTS
...
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Sean Mullan
3f59d3882d
Merge
2012-11-26 08:23:20 -05:00
Sean Mullan
c9b91fa45a
7167056: Clarify that BasicPermission names that contain non-wildcard asterisks are not invalid
...
Reviewed-by: weijun, xuelei
2012-11-26 08:12:19 -05:00
Sean Mullan
4e6425e134
Merge
2012-11-05 12:08:04 -05:00
Sean Mullan
5b23307a8f
7171570: JEP 124 Potential API Changes
...
Reviewed-by: vinnie, xuelei
2012-11-05 10:30:49 -05:00
Alan Bateman
430592a30e
7197491: update copyright year to match last edit in jdk8 jdk repository
...
Reviewed-by: chegar, ksrini
2012-11-02 15:50:11 +00:00
Sean Mullan
6ad27831e0
7176326: CertPath/CertPathBuilderTest failures after webrev 6854712_6637288_7126011
...
Reviewed-by: xuelei
2012-06-15 08:43:31 -04:00
Jonathan Lu
775655b44a
7172149: ArrayIndexOutOfBoundsException from Signature.verify
...
Take care of integer addition overflow
Reviewed-by: xuelei, wetmore
2012-06-06 18:39:09 -07:00
Sean Mullan
63e39d6ee7
Merge
2012-05-31 17:07:28 -04:00
Sean Mullan
14c586557e
6854712: Revocation checking enhancements (JEP-124)
...
6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE
Reviewed-by: xuelei
2012-05-30 17:19:46 -04:00
Sean Mullan
ac620e811d
7152564: Improve CodeSource.matchLocation(CodeSource) performance
...
7155693: CodeSource.matchLocation getPort test can be improved
Reviewed-by: chegar
2012-04-13 09:46:25 -04:00
Alan Bateman
3269d85838
7113349: Initial changeset for Macosx port to jdk
...
Co-authored-by: Alexander Potochkin <alexander.potochkin@oracle.com>
Co-authored-by: Alexander Zuev <alexander.zuev@oracle.com>
Co-authored-by: Andrew Brygin <andrew.brygin@oracle.com>
Co-authored-by: Artem Ananiev <artem.ananiev@oracle.com>
Co-authored-by: Alex Strange <astrange@apple.com>
Co-authored-by: Bino George <bino@apple.com>
Co-authored-by: Christine Lu <christine.lu@oracle.com>
Co-authored-by: David Katleman <david.katleman@oracle.com>
Co-authored-by: David Durrence <david_durrence@apple.com>
Co-authored-by: Dmitry Cherepanov <dmitry.cherepanov@oracle.com>
Co-authored-by: Greg Lewis <glewis@eyesbeyond.com>
Co-authored-by: Kevin Miller <kevin_m_miller@apple.com>
Co-authored-by: Kurt Miller <kurt@intricatesoftware.com>
Co-authored-by: Landon Fuller <landonf@plausiblelabs.com>
Co-authored-by: Leonid Romanov <leonid.romanov@oracle.com>
Co-authored-by: Loefty Walkowiak <loefty@apple.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Roger Hoover <rhoover@apple.com>
Co-authored-by: Scott Kovatch <scott.kovatch@oracle.com>
Co-authored-by: Sergey ByloKhov <sergey.bylokhov@oracle.com>
Co-authored-by: Mike Swingler <swingler@apple.com>
Co-authored-by: Tomas Hurka <tomas.hurka@oracle.com>
Reviewed-by: jjh, alanb, dholmes, anthony, ohrstrom, ksrini, jrose, weijun, smarks
2012-03-06 20:34:38 +00:00
Valerie Peng
eafb7ad68c
7088989: Improve the performance for T4 by utilizing the newly provided crypto APIs
...
Added the OracleUcrypto provider for utilizing the Solaris ucrypto API.
Reviewed-by: weijun
2012-01-12 16:04:03 -08:00
Weijun Wang
b0fb95c8d3
7081411: DSA keypair generation affected by Solaris bug
...
Reviewed-by: xuelei, mullan, alanb
2011-09-05 18:17:55 +08:00
Weijun Wang
610c9dd4e3
7055363: jdk_security3 test target cleanup
...
Reviewed-by: alanb, xuelei
2011-08-12 12:26:31 +08:00
Lana Steuck
69ce407621
Merge
2011-06-22 23:23:58 -07:00
Weijun Wang
700f4e1951
7054918: jdk_security1 test target cleanup
...
Reviewed-by: alanb, smarks, vinnie
2011-06-20 19:17:47 +08:00
Weijun Wang
8bdce645f3
7054428: test/java/security/SecureClassLoader/DefineClassByteBuffer.java error
...
Reviewed-by: alanb
2011-06-20 17:38:15 +08:00
Bradford Wetmore
33be52be86
7052537: java/security/Security/NotInstalledProviders.java is causing -samevm tests to fail
...
Reviewed-by: valeriep, asaha, alanb
2011-06-09 14:24:09 -07:00
Lana Steuck
4ce35dcaa5
Merge
2011-06-06 19:04:30 -07:00
Sean Mullan
998c791227
7050329: test/java/security/Policy/GetPermissions/JarURL.java fails on Windows
...
Reviewed-by: alanb
2011-06-04 06:45:17 -07:00
Abhijit Saha
cfdb3ec24b
Merge
2011-05-26 21:37:40 -07:00
Deepak Bhole
b49a7d2768
7044443: Permissions resolved incorrectly for jar protocol (Patch from bugs.openjdk.java.net)
...
Reviewed-by: alanb, chegar
2011-05-24 14:15:14 -07:00
Vinnie Ryan
87259cf6b3
6738532: Error in Elliptic Curve NamedCurve determination. (related to PKCS11)
...
Reviewed-by: valeriep
2011-05-04 20:38:45 +01:00
Abhijit Saha
68c514a747
Merge
2011-04-20 09:31:11 -07:00
Kelly O'Hair
d2b1e20c7d
7033660: Update copyright year to 2011 on any files changed in 2011
...
Reviewed-by: dholmes
2011-04-06 22:06:11 -07:00