636 Commits

Author SHA1 Message Date
Rajan Halade
751de03704 8225130: Add exception for expiring Comodo roots to VerifyCACerts test
Reviewed-by: weijun
2020-03-01 23:04:02 -08:00
Amy Lu
67ba91ba52 8239979: sun/security/tools/keytool/ExtOptionCamelCase.java is not run
Reviewed-by: rhalade
2020-02-27 12:19:24 +08:00
Ravi Reddy
9b12c80e21 8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
Reviewed-by: pkoppula, weijun, coffeys
2020-02-26 18:06:19 +03:00
Weijun Wang
533649b8ca 8237218: Support NIST Curves verification in java implementation
Reviewed-by: ascarpino
2020-02-22 08:10:21 +08:00
Sean Mullan
fb37c54630 8238560: Cleanup and consolidate algorithms in the jdk.tls.legacyAlgorithms security property
Reviewed-by: xuelei
2020-02-20 16:36:38 -05:00
Jamil Nimeh
39db83a9cc 8239094: PKCS#9 ChallengePassword attribute does not allow for the UTF8String type
Reviewed-by: xuelei
2020-02-19 13:36:53 -08:00
Rajan Halade
11386e7cb2 8225128: Add exception for expiring DocuSign root to VerifyCACerts test
Reviewed-by: clanger
2020-02-18 16:00:40 -08:00
Xue-Lei Andrew Fan
4e430ffbb6 8239264: Clearup the legacy ObjectIdentifier constructor from int array
Reviewed-by: jnimeh
2020-02-17 18:52:50 -08:00
Weijun Wang
c4681a95dc 8160818: GssKrb5Client violates RFC 4752
Reviewed-by: xuelei
2020-02-15 09:26:32 +08:00
Valerie Peng
c103a1bb69 8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
Calculate and set offset for correct verification for such key sizes

Reviewed-by: xuelei
2020-02-12 02:44:45 +00:00
Weijun Wang
06579fcefa 8237804: sun/security/mscapi tests fail with "Key pair not generated, alias <nnnnnn> already exists"
Reviewed-by: mullan
2020-02-05 11:09:02 +08:00
Mikael Vidstedt
3318314c7c 8237589: Fix copyright header formatting
Reviewed-by: jjg, serb, iris, jwilhelm
2020-01-21 14:23:01 -08:00
Masanori Yano
567465c62c 8216012: Infinite loop in RSA KeyPairGenerator
Check and error out on even RSA public exponents

Reviewed-by: valeriep
2020-01-17 01:05:27 +00:00
Igor Ignatyev
e2240b714e 8236111: narrow allowSmartActionArgs disabling
Reviewed-by: dholmes, mullan, darcy, rriggs
2020-01-15 21:20:40 -08:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00
Henry Jen
231d9afe6f Merge 2020-01-09 20:16:21 +00:00
Weijun Wang
e7a07ea2f3 8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
Reviewed-by: xuelei
2019-12-25 07:17:25 +08:00
John Jiang
4deb35453f 8234727: sun/security/ssl/X509TrustManagerImpl tests support TLSv1.3
Reviewed-by: xuelei
2019-12-21 06:28:48 +08:00
Jesper Wilhelmsson
257a1bb854 Merge 2020-01-08 16:03:32 +01:00
Mikael Vidstedt
c33466012e Merge 2019-12-20 22:41:53 -08:00
Sibabrata Sahoo
58cce5fbf4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-13 01:43:14 -08:00
Sean Mullan
a0f8febb8b 8230318: Better trust store usage
Reviewed-by: weijun, rhalade, ahgross
2019-10-22 17:25:34 -04:00
Weijun Wang
f3815c85a1 8231139: Improved keystore support
Reviewed-by: mullan, ahgross
2019-10-09 17:42:38 +08:00
Weijun Wang
bda0fba56b 8229951: Better Ticket Granting Services
Reviewed-by: ahgross, valeriep
2019-09-26 18:12:53 +08:00
Sean Mullan
6cb8dfa9e3 8227758: More valid PKIX processing
Reviewed-by: xuelei, rhalade, coffeys, mschoene
2019-08-26 13:57:51 -04:00
Weijun Wang
010ac54044 8236070: Backout fix for JDK-8234465
Reviewed-by: mullan
2019-12-17 20:56:53 +08:00
Weijun Wang
31b07b21ae 8234465: Encoded elliptic curve private keys should include the public point
Reviewed-by: xuelei
2019-12-17 09:38:30 +08:00
Sibabrata Sahoo
94e8d6eca4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-12 22:47:24 -08:00
Martin Balao
4fa827ec92 8005819: Support cross-realm MSSFU
Reviewed-by: weijun
2019-12-11 15:43:42 -03:00
Weijun Wang
2215201dd5 8226352: Improve Kerberos interop capabilities
Reviewed-by: ahgross, mullan, valeriep
2019-07-19 14:51:04 +08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
2019-12-09 21:38:12 -08:00
Weijun Wang
bc19b64856 8234744: KeyStore.store can write wrong type of file
Reviewed-by: mullan
2019-12-03 14:38:18 +08:00
Rajan Halade
17c2f4808a 8233223: Add Amazon Root CA certificates
Reviewed-by: mullan
2019-11-28 10:43:35 -08:00
Sibabrata Sahoo
f97eccfdc9 8234725: sun/security/ssl/SSLContextImpl tests support TLSv1.3
Missing TLSv1.3 test cases

Reviewed-by: xuelei
2019-11-27 22:11:08 -08:00
Weijun Wang
8c6eb44946 8026393: jarsigner never shows a warning in badKeyUsage case
Reviewed-by: mullan
2019-11-22 09:33:03 +08:00
Weijun Wang
d5b423d17c 8234377: new BitArray(0).toString() throws ArrayIndexOutOfBoundsException
Reviewed-by: mullan, wetmore
2019-11-20 08:12:14 +08:00
Jie Fu
25d178f477 8234245: sun/security/lib/cacerts/VerifyCACerts.java fails due to wrong checksum
Reviewed-by: mullan
2019-11-15 19:38:31 +08:00
Rajan Halade
d1ebadb966 8232019: Add LuxTrust certificate updates to the existing root program
Reviewed-by: mullan
2019-11-14 19:49:55 -08:00
Weijun Wang
c0d097eac6 8214024: Remove the default keytool -keyalg value
Reviewed-by: mullan
2019-11-15 09:06:58 +08:00
Weijun Wang
a66829bc89 8231950: keytool -ext camel-case shorthand not working
Reviewed-by: mullan
2019-11-04 14:26:18 +08:00
Weijun Wang
055a49a266 8228969: 2019-09-28 public suffix list update
Reviewed-by: mullan
2019-10-29 09:34:21 +08:00
Weijun Wang
72330c70d7 8231598: keytool does not export sun.security.mscapi
Reviewed-by: mullan
2019-10-24 15:53:20 +08:00
Henry Jen
8d141f1048 Merge 2019-10-14 21:01:25 +00:00
Valerie Peng
381e90eb6b 8229243: SunPKCS11-Solaris provider tests failing on Solaris 11.4
For CK_GCM_PARAMS, try the spec definition first before falling back to the header file definition

Reviewed-by: xuelei
2019-10-08 00:01:20 +00:00
Matthias Baesken
09c012be4e 8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14
Reviewed-by: clanger, valeriep
2019-09-26 13:51:43 +02:00
John Jiang
0a0956bcda 8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
Reviewed-by: xuelei
2019-09-21 08:06:00 +08:00
John Jiang
655cf14138 8228967: Trust/Key store and SSL context utilities for tests
Reviewed-by: xuelei
2019-09-05 14:55:21 +08:00
John Jiang
dfe4ba5045 8226221: Update PKCS11 tests to use NSS 3.46 libs
Reviewed-by: xuelei
2019-09-04 12:47:42 +08:00
Jamil Nimeh
d096e033d0 8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
Reviewed-by: mullan
2019-08-22 14:09:36 -07:00
Weijun Wang
b84ffae32f 8229775: Incorrect warning when jar was signed with -sectionsonly
Reviewed-by: mullan
2019-08-16 08:42:09 +08:00