Weijun Wang
5ae304e238
8012615: Realm.getRealmsList returns realms list in wrong
...
Reviewed-by: valeriep, xuelei
2013-09-18 18:22:49 +08:00
Bradford Wetmore
47f46da3fa
8025694: Rename getStrongSecureRandom based on feedback
...
8014838: getStrongSecureRandom() should require at least one implementation
Reviewed-by: mullan, darcy
2013-10-02 09:38:57 -07:00
Artem Smotrakov
54ebd8d42e
8025123: SNI support in Kerberos cipher suites
...
Reviewed-by: weijun, xuelei
2013-10-01 20:25:44 -07:00
Anthony Scarpino
cf7cbcdce8
8004283: test/sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failing intermittently
...
Reviewed-by: vinnie
2013-09-18 14:57:29 -07:00
Weijun Wang
b16be80c6b
8024861: Incomplete token triggers GSS-API NullPointerException
...
Reviewed-by: mullan
2013-09-27 15:25:18 +08:00
Weijun Wang
c5fd247e16
8022761: regression: SecurityException is NOT thrown while trying to pack a wrongly signed Indexed Jar file
...
Reviewed-by: sherman
2013-08-27 17:50:55 +08:00
Weijun Wang
849788a425
8015669: KerberosPrincipal::equals should ignore name-type
...
Reviewed-by: mullan
2013-08-27 17:50:52 +08:00
Xue-Lei Andrew Fan
cac8b88f48
8022228: Intermittent test failures in sun/security/ssl/javax/net/ssl/NewAPIs
...
Reviewed-by: weijun
2013-08-21 19:44:35 -07:00
Xue-Lei Andrew Fan
2e2313ef87
8020842: IDN do not throw IAE when hostname ends with a trailing dot
...
Reviewed-by: weijun, michaelm
2013-08-19 17:42:39 -07:00
Xue-Lei Andrew Fan
1cff90b335
8024068: sun/security/ssl/javax/net/ssl/ServerName/IllegalSNIName.java fails
...
Reviewed-by: weijun
2013-09-01 20:00:03 -07:00
Weijun Wang
9688bbb771
8021789: jarsigner parses alias as command line option (depending on locale)
...
Reviewed-by: vinnie
2013-08-02 08:59:37 +08:00
Anthony Scarpino
eae349e914
8020424: The NSS version should be detected before running crypto tests
...
Reviewed-by: valeriep
2013-07-29 13:43:24 -07:00
Anthony Scarpino
a7dbbbddcd
8012971: PKCS11Test hiding exception failures
...
Reviewed-by: vinnie, valeriep
2013-07-19 11:34:33 -07:00
Lana Steuck
ac26dd6009
Merge
2013-07-26 15:16:53 -07:00
Rajan Halade
26d9259db7
8019544: Need to run ProviderTest.java in othervm mode
...
Reviewed-by: wetmore, xuelei, vinnie
2013-07-26 14:16:53 -07:00
Lana Steuck
29041e2c4a
Merge
2013-07-26 14:07:32 -07:00
Jason Uh
e01b8f673e
8016916: UnstructuredName should support DirectoryString
...
Reviewed-by: mullan
2013-07-24 12:48:10 -07:00
Lana Steuck
ee1b9621d9
Merge
2013-07-22 17:37:15 -07:00
Weijun Wang
2842af69c0
8019410: sun/security/krb5/auto/ReplayCacheTestProc.java
...
Reviewed-by: mullan
2013-07-13 08:47:49 +08:00
David Katleman
1ad2c364d6
8020414: JDK8 b98 source with GPL header errors
...
Reviewed-by: darcy, lancea, iris
2013-07-11 14:03:31 -07:00
Valerie Peng
a4223b53c1
8020321: Problem in PKCS11 regression test TestRSAKeyLength
...
Corrected the "isValidKeyLength" array
Reviewed-by: xuelei
2013-07-11 11:43:23 -07:00
Weijun Wang
2241a3720d
8019267: NPE in AbstractSaslImpl when trace level >= FINER in KRB5
...
Reviewed-by: mullan
2013-07-10 15:11:32 +08:00
Bradford Wetmore
2c7b97640d
8019341: Update CookieHttpsClientTest to use the newer framework
...
Reviewed-by: xuelei, smarks, michaelm
2013-07-05 18:22:58 -07:00
Xue-Lei Andrew Fan
d22a89a1ae
8017049: rename property jdk.tls.rejectClientInitializedRenego
...
Reviewed-by: vinnie, wetmore, mullan
2013-06-26 06:32:40 -07:00
Weijun Wang
cb9be51085
8017453: ReplayCache tests fail on multiple platforms
...
Reviewed-by: xuelei
2013-06-24 16:25:28 +08:00
Weijun Wang
af996219c7
8001326: Improve Kerberos caching
...
Reviewed-by: valeriep
2013-06-21 18:26:13 +08:00
Xue-Lei Andrew Fan
b0246ef1ae
8017157: catch more exception in test RejectClientRenego
...
Reviewed-by: vinnie
2013-06-20 07:48:49 -07:00
Xue-Lei Andrew Fan
1ead1fc8bc
7188658: Add possibility to disable client initiated renegotiation
...
Reviewed-by: weijun, wetmore
2013-06-19 02:33:07 -07:00
Xue-Lei Andrew Fan
7384a4704e
8000456: Add programmatic deadlock detection in SSLEngineDeadlock
...
Reviewed-by: wetmore
2013-06-18 18:50:13 -07:00
Weijun Wang
1e0ca48079
8015274: TEST_BUG: Step2: After selecting 'View Warning Log', it is empty instead of FileNotFound
...
8015276: TEST_BUG: The 'ptool.test' can't be saved in the 'tmp' folder
8016158: Instruction is not clear on how to use keytool to create JKS store in case
Reviewed-by: mullan
2013-06-13 10:00:00 +08:00
Weijun Wang
77e684366c
8014310: JAAS/Krb5LoginModule using des encytypes failure with NPE after JDK-8012679
...
Reviewed-by: valeriep
2013-06-13 09:59:29 +08:00
Pasi Eronen
b888136f12
8014618: Need to strip leading zeros in TlsPremasterSecret of DHKeyAgreement
...
Reviewed-by: xuelei
2013-05-30 22:02:43 -07:00
Weijun Wang
c43d7aa0de
8014196: ktab creates a file with zero kt_vno
...
Reviewed-by: valeriep
2013-05-24 17:15:43 +08:00
Vinnie Ryan
193ed72708
Merge
2013-05-16 02:43:58 -07:00
Stephen Flores
c39030c7b3
7194075: Various classes of sunec.jar are duplicated in rt.jar
...
Reviewed-by: mullan, vinnie
2013-05-14 18:08:18 +01:00
Valerie Peng
fe625d26a3
Merge
2013-05-13 16:52:33 -07:00
Anthony Scarpino
2c0b00cbe0
8001284: Buffer problems with SunPKCS11-Solaris and CKM_AES_CTR
...
Changed output length calculation to include incomplete blocks for CTR mode.
Reviewed-by: valeriep
2013-05-07 14:13:53 -07:00
Valerie Peng
94c8fa5cb1
7196009: SunPkcs11 provider fails to parse config path containing parenthesis
...
Enhanced to allow quoted string as library path values.
Reviewed-by: weijun
2013-05-07 14:06:19 -07:00
Weijun Wang
5ec35be1d2
8010192: Enable native JGSS provider on Mac
...
Reviewed-by: valeriep
2013-05-07 12:30:36 +08:00
Jason Uh
b762ba9ab4
8005922: TEST_BUG: There is no /tmp directory for windows system
...
Reviewed-by: weijun
2013-05-03 15:04:54 -07:00
Jason Uh
33196b314d
8007699: Move some tests from test/sun/security/provider/certpath/X509CertPath to closed repo
...
Reviewed-by: mullan
2013-05-09 12:00:46 -07:00
Weijun Wang
0c02ab3a5e
8012679: Let allow_weak_crypto default to false
...
Reviewed-by: valeriep
2013-05-08 08:25:34 +08:00
Weijun Wang
905250cdfe
8012082: SASL: auth-conf negotiated, but unencrypted data is accepted, reset to unencrypt
...
Reviewed-by: vinnie
2013-05-01 21:05:10 +08:00
Weijun Wang
70b23a07be
8005523: Unbound krb5 for TLS
...
Reviewed-by: xuelei
2013-04-27 18:25:16 +08:00
Alan Bateman
d51ab5c39c
8012530: test/sun/security/provider/SecureRandom/StrongSeedReader.java failing
...
Reviewed-by: wetmore
2013-04-25 17:10:36 -07:00
Weijun Wang
0ec3fd796b
8005527: [TEST_BUG] console.sh failed Automatically with exit code 1
...
Reviewed-by: xuelei
2013-04-22 11:39:53 +08:00
Weijun Wang
ab7ecdd1b3
8009636: JARSigner including TimeStamp PolicyID (TSAPolicyID) as defined in RFC3161
...
Reviewed-by: mullan
2013-04-19 15:41:11 +08:00
Vinnie Ryan
74d720c7b5
Merge
2013-04-17 02:53:02 -07:00
Weijun Wang
dfcf6055a7
8011124: Make KerberosTime immutable
...
Reviewed-by: xuelei
2013-04-17 10:15:33 +08:00
Bradford Wetmore
63a6638ebf
6425477: Better support for generation of high entropy random numbers
...
Reviewed-by: xuelei, weijun, mullan
2013-04-11 21:03:24 -07:00
Xue-Lei Andrew Fan
a973a4d533
8011680: Re-integrate AEAD implementation of JSSE
...
It is a re-merge of JDK-7030966.
Reviewed-by: wetmore
2013-04-11 18:57:14 -07:00
Weijun Wang
b02989edef
8011867: Accept unknown PKCS #9 attributes
...
Reviewed-by: vinnie
2013-04-11 11:09:50 +08:00
Weijun Wang
7d8e86633a
8005460: [findbugs] Probably returned array should be cloned
...
Reviewed-by: xuelei
2013-04-11 10:58:17 +08:00
Weijun Wang
4a64ecdf42
8010125: keytool -importkeystore could create a pkcs12 keystore with different storepass and keypass
...
Reviewed-by: vinnie
2013-03-28 20:27:53 +08:00
Weijun Wang
5f08966515
8009875: Provide a default udp_preference_limit for krb5.conf
...
Reviewed-by: valeriep
2013-03-23 11:49:39 +08:00
Lana Steuck
31330fc47a
Merge
2013-03-12 19:04:49 -07:00
Bradford Wetmore
9e5da0ad31
8009925: Back out AEAD CipherSuites temporarily
...
Reviewed-by: valeriep
2013-03-12 15:31:49 -07:00
Weijun Wang
2ec1224ff0
8000653: SPNEGO tests fail at context.getDelegCred().getRemainingInitLifetime(mechOid)
...
Reviewed-by: valeriep
2013-03-09 17:27:58 +08:00
Sean Mullan
6190b5040a
Merge
2013-03-01 16:15:23 -05:00
Sean Mullan
6cd495e473
8008908: Access denied when invoking Subject.doAsPrivileged()
...
Wildcard principal names are not processed correctly
Reviewed-by: xuelei
2013-03-01 16:12:50 -05:00
Xue-Lei Andrew Fan
9abb185430
7030966: Support AEAD CipherSuites
...
Reviewed-by: weijun, wetmore, valeriep
2013-03-01 02:34:34 -08:00
Edvard Wendelin
2f5be3ab0d
Merge
2013-02-25 08:44:00 +01:00
Mark Sheppard
ec9e303630
8006182: cleanup to use java.util.Base64 in java security component, providers, and regression tests
...
Refactored code to use java.util.Base64 Mime Encoder and Decoder as a replacement for sun.misc.BASE64Encoder and sun.misc.BASE64Decoder
Reviewed-by: vinnie, chegar, sherman
2013-02-21 20:01:22 +00:00
Edvard Wendelin
cbfc80d987
Merge
2013-02-19 21:48:01 +01:00
David Holmes
390cc1d7a1
Merge
2013-02-17 16:44:19 -05:00
Vinnie Ryan
8f58ebc261
8007755: Support the logical grouping of keystores
...
Reviewed-by: mullan
2013-02-13 19:40:51 +00:00
Weijun Wang
d8233ec657
8001104: Unbound SASL service: the GSSAPI/krb5 mech
...
Reviewed-by: valeriep
2013-02-09 16:43:49 +08:00
Edvard Wendelin
11036fb4d5
Merge
2013-02-05 15:35:35 +01:00
Vinnie Ryan
85c0519ca6
8007483: attributes are ignored when loading keys from a PKCS12 keystore
...
Reviewed-by: mullan
2013-02-05 14:25:47 +00:00
David Holmes
eb1726c151
Merge
2013-02-04 18:08:50 -05:00
Vinnie Ryan
ddbfa5fe53
8006994: Cleanup PKCS12 tests to ensure streams get closed
...
Reviewed-by: mullan
2013-02-04 17:20:26 +00:00
Weijun Wang
0c6cb9cdc2
8006564: Test sun/security/util/Oid/S11N.sh fails with timeout on Linux 32-bit
...
Reviewed-by: alanb
2013-02-01 07:39:41 +08:00
Vinnie Ryan
3727e751f6
8006855: PKCS12 test failures due to unsupported algorithm
...
Reviewed-by: mullan
2013-01-24 16:44:15 +00:00
Vinnie Ryan
b680bc8ca7
8005408: KeyStore API enhancements
...
Reviewed-by: mullan
2013-01-23 23:13:54 +00:00
Chris Hegarty
12e480040a
8006669: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/PostThruProxy.sh fails on mac
...
Reviewed-by: alanb
2013-01-23 14:45:44 +00:00
Alan Bateman
a23a1a942b
8004502: Compact Profiles contents
...
Reviewed-by: dholmes, mchung
2013-01-21 23:35:36 -05:00
Jason Uh
3d92cb12a6
8006092: SecurityPermission: printIdentity doesn't exist
...
Reviewed-by: weijun
2013-01-21 15:05:49 +08:00
Jason Uh
5d2a6972af
8005939: sun/security/x509/{X509CRLImplX509CertImpl}/Verify.java fail in confusing way when some providers not present
...
Reviewed-by: mullan, weijun
2013-01-16 13:35:17 -05:00
Jason Uh
68eb431db8
8005389: Backout fix for JDK-6500133
...
Reviewed-by: mullan
2013-01-16 09:51:21 -05:00
Alan Bateman
c12b624078
8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
...
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697
Merge
2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815
Merge
2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac
7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator
...
Add new java.security.Principal.implies method
Reviewed-by: alanb
2013-01-08 19:00:12 -05:00
Weijun Wang
d9c892c9fd
8005447: default principal should act as anyone
...
Reviewed-by: valeriep
2013-01-08 14:54:56 +08:00
Lana Steuck
b7af263526
Merge
2012-12-28 18:36:41 -08:00
Xue-Lei Andrew Fan
6d41a58c82
7109274: Restrict the use of certificates with RSA keys less than 1024 bits
...
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.
Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
David Katleman
306cab1006
8004982: JDK8 source with GPL header errors
...
Reviewed-by: ohair
2012-12-20 16:24:50 -08:00
Weijun Wang
5ded9d47a1
7197159: accept different kvno if there no match
...
Reviewed-by: xuelei
2012-12-17 12:18:46 +08:00
Mark Sheppard
c9063f559f
8003890: corelibs test scripts should pass TESTVMOPTS
...
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Jason Uh
e3c39dffe5
7193792: sun/security/pkcs11/ec/TestECDSA.java failing intermittently
...
Reviewed-by: vinnie, wetmore
2012-12-13 09:35:35 -05:00
Weijun Wang
2be2f20b65
8004488: wrong permissions checked in krb5
...
Reviewed-by: xuelei
2012-12-11 13:14:56 +08:00
Edvard Wendelin
f92370665e
Merge
2013-02-03 23:25:38 +01:00
Xue-Lei Andrew Fan
eb66ce8b2e
8004184: security tests leave JSSEServer running
...
Use othervm mode to release resources, and correct the system properties issues in JSSE
Reviewed-by: chegar
2012-12-03 06:00:19 -08:00
Weijun Wang
fdd109b467
7198507: [TEST_BUG] sun/security/tools/keytool/console.sh should be rewritten
...
Reviewed-by: xuelei
2012-12-03 17:14:03 +08:00
Weijun Wang
2aea4cbc8c
8002344: Krb5LoginModule config class does not return proper KDC list from DNS
...
Co-authored-by: Severin Gehwolf <sgehwolf@redhat.com>
Reviewed-by: weijun
2012-11-19 11:13:08 +08:00
Xue-Lei Andrew Fan
d0e329751f
8001569: Regression test GetPeerHost uses static port number
...
Reviewed-by: weijun
2012-11-09 01:15:04 -08:00
Jason Uh
fdfd7968f7
7198416: CertificateIssuerName and CertificateSubjectName are redundant
...
Reviewed-by: mullan
2012-11-08 12:51:25 -05:00
Weijun Wang
5fca8126cd
6355584: Introduce constrained Kerberos delegation
...
Reviewed-by: valeriep
2012-11-07 14:13:01 +08:00
Alan Bateman
430592a30e
7197491: update copyright year to match last edit in jdk8 jdk repository
...
Reviewed-by: chegar, ksrini
2012-11-02 15:50:11 +00:00
Weijun Wang
a60d4fd720
7110803: SASL service for multiple hostnames
...
Reviewed-by: mullan
2012-11-02 10:48:04 +08:00