655 Commits

Author SHA1 Message Date
Weijun Wang
9cd5400d9b 8265138: Simplify DerUtils::checkAlg
Reviewed-by: xuelei
2021-04-13 16:56:36 +00:00
Martin Balao
1ee80e03ad 8261355: No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding
Reviewed-by: valeriep
2021-04-12 20:58:08 +00:00
Abdul Kolarkunnu
9bb1863ed7 8260923: Add more tests for SSLSocket input/output shutdown
Reviewed-by: coffeys
2021-04-09 13:57:58 +00:00
Hai-May Chao
719f95e504 8260693: Provide the support for specifying a signer in keytool -genkeypair
Reviewed-by: weijun
2021-04-09 01:59:59 +00:00
Weijun Wang
3d2b4cc567 8264864: Multiple byte tag not supported by ASN.1 encoding
Reviewed-by: xuelei
2021-04-08 21:26:05 +00:00
Weijun Wang
eb5c097b6d 8262389: Use permitted_enctypes if default_tkt_enctypes or default_tgs_enctypes is not present
Reviewed-by: mullan
2021-04-06 23:58:21 +00:00
Ziyi Luo
a5d7de2351 8263404: RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
Co-authored-by: Greg Rubin <rubin@amazon.com>
Reviewed-by: valeriep
2021-03-29 20:14:47 +00:00
John Jiang
99b4bab366 8263188: JSSE should fail fast if there isn't supported signature algorithm
Reviewed-by: xuelei
2021-03-29 05:53:05 +00:00
Sibabrata Sahoo
5a51d70987 8247895: SHA1PRNGReseed.java is calling setSeed(0)
Reviewed-by: weijun, rhalade
2021-03-23 06:46:20 +00:00
Evan Whelan
b2a2ddff44 8262438: sun/security/ssl/SSLLogger/LoggingFormatConsistency.java failed with "SocketException: Socket is closed"
Reviewed-by: rhalade
2021-03-10 15:15:53 +00:00
Fernando Guallini
e1cad97049 8262862: Harden tests sun/security/x509/URICertStore/ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
Reviewed-by: aefimov, michaelm
2021-03-05 16:26:05 +00:00
Ziyi Luo
a777e82cd8 8254717: isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards
Reviewed-by: jnimeh
2021-03-04 15:17:53 +00:00
Weijun Wang
ded96ddcde 8139348: Deprecate 3DES and RC4 in Kerberos
Reviewed-by: mullan
2021-02-25 18:49:05 +00:00
Fernando Guallini
d70fd7b3c4 8258855: Two tests sun/security/krb5/auto/ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java failed on OL8.3
Reviewed-by: weijun, rhalade
2021-02-24 17:05:58 +00:00
Jamil Nimeh
a30fb4fc68 8255867: SignatureScheme JSSE property does not preserve ordering in handshake messages
Reviewed-by: xuelei
2021-02-22 22:18:11 +00:00
Evan Whelan
a86728850e 8211227: Inconsistent TLS protocol version in debug output
Reviewed-by: xuelei, rhalade
2021-02-22 21:12:04 +00:00
Clive Verghese
63f8fc87cd 8259662: Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl
Reviewed-by: xuelei
2021-02-22 18:36:30 +00:00
Hai-May Chao
05301f5fd2 8257497: Update keytool to create AKID from the SKID of the issuing certificate as specified by RFC 5280
Reviewed-by: coffeys, mullan, weijun
2021-02-17 16:38:56 +00:00
Fernando Guallini
0a50688dec 8241372: Several test failures due to javax.net.ssl.SSLException: Connection reset
Reviewed-by: dfuchs, rhalade
2021-02-16 18:54:39 +00:00
Christoph Langer
dc46aa85c6 8261534: Test sun/security/pkcs11/KeyAgreement/IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined
Reviewed-by: mbaesken
2021-02-12 20:58:22 +00:00
Rajan Halade
ef7ee3f44e 8225081: Remove Telia Company CA certificate expiring in April 2021
Reviewed-by: mullan
2021-02-09 17:56:35 +00:00
Fernando Guallini
d2bd499222 8163498: Many long-running security libs tests
Reviewed-by: rhalade, weijun
2021-02-05 05:22:51 +00:00
Weijun Wang
4a8b5c1602 8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m

Reviewed-by: erikj, prr, ihse, valeriep
2021-02-03 16:20:16 +00:00
Rajan Halade
69189f8820 8256421: Add 2 HARICA roots to cacerts truststore
Reviewed-by: hchao, mullan
2021-02-02 18:26:34 +00:00
Xue-Lei Andrew Fan
71bfe962eb 8217633: Configurable extensions with system properties
Reviewed-by: rhalade, jnimeh
2021-01-30 00:21:01 +00:00
Fernando Guallini
9f0a043648 8260286: Manual Test "ws/open/test/jdk/sun/security/tools/jarsigner/compatibility/Compatibility.java" fails
Reviewed-by: rhalade
2021-01-26 18:15:26 +00:00
Martin Balao
47c7dc7734 8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
Reviewed-by: valeriep
2021-01-25 18:01:59 +00:00
Hai-May Chao
8b95d9549e 8256895: Add support for RFC 8954: Online Certificate Status Protocol (OCSP) Nonce Extension
Reviewed-by: jnimeh, mullan
2021-01-20 22:23:50 +00:00
Valerie Peng
68cf65d284 8023980: JCE doesn't provide any class to handle RSA private key in PKCS#1
Reviewed-by: weijun
2021-01-18 02:26:17 +00:00
Jamil Nimeh
8554fe6ebc 8253866: Security Libs Terminology Refresh
Reviewed-by: erikj, weijun, mullan
2021-01-14 16:36:51 +00:00
Hai-May Chao
c7e2174bf1 8259401: Add checking to jarsigner to warn weak algorithms used in signer’s cert chain
Reviewed-by: mullan, weijun, rhalade
2021-01-13 22:32:45 +00:00
Martin Balao
4be2173478 8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
Reviewed-by: valeriep, mullan
2021-01-12 23:44:19 +00:00
Volker Simonis
e9929e2b5a 8259582: Backout JDK-8237578 until all affected tests have been fixed
Reviewed-by: xuelei
2021-01-11 21:36:16 +00:00
Clive Verghese
01b2804ef7 8237578: JDK-8214339 (SSLSocketImpl wraps SocketException) appears to not be fully fixed
Reviewed-by: xuelei, simonis
2021-01-11 12:02:09 +00:00
Roger Riggs
628c546bea 8258796: [test] Apply HexFormat to tests for java.security
Reviewed-by: xuelei
2021-01-08 21:32:54 +00:00
Rajan Halade
4ce83f2a3a 8039278: console.sh failed Automatically with exit code 1
Reviewed-by: xuelei, weijun
2021-01-07 18:47:43 +00:00
Rajan Halade
3be6e06958 8259312: VerifyCACerts.java fails as soneraclass2ca cert will expire in 90 days
Reviewed-by: mullan
2021-01-06 16:20:24 +00:00
Valerie Peng
78c9fb92aa 8258851: Mismatch in SunPKCS11 provider registration properties and actual implementation
Reviewed-by: weijun
2020-12-23 22:36:45 +00:00
Sean Coffey
a4e082e985 8253368: TLS connection always receives close_notify exception
Reviewed-by: xuelei
2020-12-23 12:26:44 +00:00
Rajan Halade
666e6c4033 8225072: Add LuxTrust certificate that is expiring in March 2021 to list of allowed but expired certs
8258630: Add expiry exception for QuoVadis root certificate

Reviewed-by: ascarpino
2020-12-17 20:27:25 +00:00
Christoph Langer
29ffffa7b9 8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java again reports leaks after JDK-8257884
Reviewed-by: mbaesken
2020-12-10 10:56:36 +00:00
Christoph Langer
fae7961a03 8257884: Re-enable sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java as automatic test
Reviewed-by: xuelei
2020-12-09 08:12:09 +00:00
Xue-Lei Andrew Fan
39b8a2e682 8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java reports leaks
Reviewed-by: jnimeh
2020-12-07 23:53:17 +00:00
Valerie Peng
78be334c38 8242332: Add SHA3 support to SunPKCS11 provider
Reviewed-by: xuelei
2020-12-05 23:47:35 +00:00
Christoph Langer
93b6ab56ae 8256818: SSLSocket that is never bound or connected leaks socket resources
Reviewed-by: xuelei
2020-12-02 19:23:26 +00:00
Bradford Wetmore
fe5cccc1ec 8254631: Better support ALPN byte wire values in SunJSSE
Reviewed-by: xuelei, dfuchs
2020-12-02 04:14:28 +00:00
Sean Mullan
dbfeb90d3a 8243559: Remove root certificates with 1024-bit keys
Reviewed-by: weijun
2020-11-24 18:14:05 +00:00
Sean Mullan
b9db002fef 8256682: JDK-8202343 is incomplete
Reviewed-by: dfuchs
2020-11-19 19:09:22 +00:00
Sean Mullan
3a4b90f086 8202343: Disable TLS 1.0 and 1.1
Reviewed-by: xuelei, dfuchs, coffeys
2020-11-19 14:15:57 +00:00
Dong Bo
b0b9dd27b8 8256318: AArch64: Add support for floating-point absolute difference
Reviewed-by: aph
2020-11-18 10:14:20 +00:00