stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
37,070 Commits 2 Branches 0 Tags 1.2 GiB
55101b0096
Commit Graph

668 Commits

Author SHA1 Message Date
Valerie Peng
86291780cb 8062170: java.security.ProviderException: Error parsing configuration with space 
Updated to parse library path as a line which can contain quoted strings.

Reviewed-by: vinnie
 2014-12-12 00:23:32 +00:00
Weijun Wang
26099e744a 8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes 
Reviewed-by: valeriep
 2014-12-09 18:28:26 +08:00
David Kocher
15d4deb44a 8046777: apple.security.KeychainStore has a problem searching for identities 
Reviewed-by: mullan
 2014-11-11 20:11:34 +00:00
Anthony Scarpino
1924ac8a18 8063700: -Xcheck:jni changes cause many JCK failures in api/javax_crypto tests in SunPKCS11 
Reviewed-by: mullan, valeriep
 2014-11-07 13:07:09 -08:00
Weijun Wang
ed9e73bb66 8057810: New defaults for DSA keys in jarsigner and keytool 
Reviewed-by: vinnie
 2014-11-05 17:15:09 +08:00
Florian Bruckner
9299e8a8a6 8062264: KeychainStore requires non-null password to be supplied when retrieving a private key 
Reviewed-by: mullan
 2014-10-29 11:53:37 +00:00
Mandy Chung
a76f56165c 8043277: Update jdk regression tests to extend the default security policy instead of override 
Reviewed-by: alanb, mullan, chegar, sla
 2014-10-27 13:45:39 -07:00
Weijun Wang
cd3c6765c2 8044215: Unable to initiate SpNego using a S4U2Proxy GSSCredential (Krb5ProxyCredential) 
Reviewed-by: mullan
 2014-10-14 10:08:32 +08:00
Weijun Wang
5468e30603 8029659: Keytool, print key algorithm of certificate or key entry 
Reviewed-by: xuelei
 2014-10-14 10:07:44 +08:00
Weijun Wang
76b1f8c99c 8060007: Keytool test can use bundled NSS lib on Mac 
Reviewed-by: vinnie
 2014-10-09 16:05:24 +08:00
Vinnie Ryan
3215ed2f0a 8059627: Enable PKCS11 tests on Mac 
Reviewed-by: mullan
 2014-10-06 16:44:57 +01:00
Vinnie Ryan
a8d4acac11 8041740: Test sun/security/tools/keytool/ListKeychainStore.sh fails on Mac 
Reviewed-by: mullan
 2014-10-05 14:24:44 +01:00
Weijun Wang
4a99ec3dce 8059313: Enable keytool NSS test on Mac 
Reviewed-by: vinnie
 2014-09-28 10:42:50 +08:00
Weijun Wang
f18f44bce3 8042900: Allow com.sun.security.jgss to be in different module than org.ietf.jgss 
Reviewed-by: valeriep, alanb
 2014-09-17 13:55:12 +08:00
Ivan Gerasimov
13da43d0d4 8055731: sun/security/smartcardio/TestDirect.java throws java.lang.IndexOutOfBoundsException 
Reviewed-by: valeriep
 2014-08-23 01:05:50 +04:00
Weijun Wang
391a556d14 8054817: File ccache only recognizes Linux and Solaris defaults 
Reviewed-by: mullan
 2014-08-19 14:30:12 +08:00
Ivan Gerasimov
e3b86ec908 8046343: (smartcardio) CardTerminal.connect('direct') does not work on MacOSX 
Reviewed-by: mullan, valeriep
 2014-08-07 15:32:23 +04:00
Vinnie Ryan
b572fc9aad 8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently 
Reviewed-by: mullan
 2014-08-05 13:59:15 +01:00
Weijun Wang
d99124eadb 8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred 
Reviewed-by: mullan
 2014-07-21 22:10:37 +08:00
Weijun Wang
0f6c52abb1 8049834: Two security tools tests do not run with only JRE 
Reviewed-by: mullan
 2014-07-21 22:09:38 +08:00
Weijun Wang
bfa19ebfbc 8043071: Expose session key and KRB_CRED through extended GSS-API 
Reviewed-by: mullan
 2014-07-19 10:20:42 +08:00
Ivan Gerasimov
80448466d4 8050893: (smartcardio) Invert reset argument in tests in sun/security/smartcardio 
Reviewed-by: valeriep
 2014-07-18 17:04:10 +04:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible 
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
 2014-07-10 22:44:58 +00:00
Weijun Wang
57d0562d7c 8044085: Access ExtendedGSSContext.inquireSecContext() result through SASL 
Reviewed-by: mullan
 2014-07-10 10:44:48 +08:00
Weijun Wang
ea1882be4f 8048073: Cannot read ccache entry with a realm-less service name 
Reviewed-by: xuelei
 2014-06-25 18:49:02 +08:00
Weijun Wang
cc269950df 8029994: Support "include" and "includedir" in krb5.conf 
Reviewed-by: mullan
 2014-06-20 10:27:10 +08:00
Vinnie Ryan
7d5e52ba49 8047085: PKCS11/NSS tests failing intermittently on Windows 
Reviewed-by: mullan
 2014-06-18 15:05:29 +01:00
Weijun Wang
a22c2ed67f 8046702: default_options.sh test failure on Solaris 
Reviewed-by: xuelei
 2014-06-13 08:25:50 +08:00
Weijun Wang
53c7b2ac2b 8023197: Pre-configured command line options for keytool and jarsigner 
Reviewed-by: xuelei
 2014-06-11 18:27:10 +08:00
Anthony Scarpino
b757b4461e 8039212: SecretKeyBasic.sh needs to avoid NSS libnss3 and libsoftokn3 version mismatches 
Reviewed-by: vinnie
 2014-06-10 12:04:42 -07:00
Weijun Wang
704a20b250 8044747: [TESTBUG] Test sun/security/tools/policytool/i18n.sh fails after clicking 'Done' button in test frame 
Reviewed-by: xuelei
 2014-06-06 22:31:53 +08:00
Weijun Wang
47e4638160 8044755: Add a test for algorithm constraints check in jarsigner 
Reviewed-by: xuelei
 2014-06-05 15:27:51 +08:00
Weijun Wang
a57ab24f53 8036779: sun.security.krb5.KdcComm interprets kdc_timeout as msec instead of sec 
Reviewed-by: xuelei
 2014-05-30 14:37:43 +08:00
Vinnie Ryan
1eef4367df 8044038: Security tests fail on 32 bit linux platform 
Reviewed-by: xuelei, weijun
 2014-05-29 15:50:36 +01:00
Weijun Wang
1b1639105a 8036709: Java 7 jarsigner displays warning about cert policy tree 
Reviewed-by: mullan
 2014-05-29 10:36:06 +08:00
Weijun Wang
53cb60f148 8043537: Changes for JDK-8039951 introduced circular dependency between Kerberos and com.sun.security.auth 
Reviewed-by: alanb
 2014-05-22 07:04:57 +08:00
Jamil Nimeh
4e99062caa 6996377: shrink duplicate code in the constructor of PKIXValidator 
Reviewed-by: mullan, xuelei
 2014-05-12 12:35:23 -04:00
Weijun Wang
79cdf6ad7f 8039951: com.sun.security.auth.module missing classes on some platforms 
Reviewed-by: mullan
 2014-05-08 22:30:31 +08:00
Weijun Wang
93378ad4b9 8040321: keytool and jarsigner tests doesn't pass though VM tools to tools 
Reviewed-by: alanb
 2014-04-25 10:57:09 +08:00
Alexandre Iline
e613bf3290 8039816: Some tests depend on internal API sun.security.action.GetPropertyAction 
Replace sun.security.action.GetPropertyAction usages with lambda expressions creating java.security.PrivilegedAction.

Reviewed-by: alanb, mchung, chegar
 2014-04-21 13:16:32 -07:00
Alexandre Iline
092e29980a 8039438: Some tests depend on internal API sun.misc.IOUtils 
Remove dependency on sun.misc.IOUtils.readFully(InputStream, int, boolean)

Reviewed-by: alanb, mchung, chegar
 2014-04-21 13:12:22 -07:00
Weijun Wang
b49a1407bc 8038837: Add support to jarsigner for specifying timestamp hash algorithm 
Reviewed-by: vinnie
 2014-04-21 10:26:03 +08:00
Xue-Lei Andrew Fan
2f501cd8a5 8028192: Use of PKCS11-NSS provider in FIPS mode broken 
Reviewed-by: ahgross, ascarpino, asmotrak
 2014-04-09 12:49:51 +00:00
Weijun Wang
3344a6c353 8039132: cleanup @ignore JAAS/krb5 tests 
Reviewed-by: xuelei
 2014-04-09 17:08:37 +08:00
Weijun Wang
9bae1e597b 8029995: accept yes/no for boolean krb5.conf settings 
Reviewed-by: mullan
 2014-04-04 21:19:43 +08:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual 
Reviewed-by: xuelei, wetmore
 2014-03-18 15:04:59 -07:00
Xue-Lei Andrew Fan
451daea8f4 8037346: Need to terminate server process if client runs into problems 
Reviewed-by: weijun
 2014-03-17 10:07:13 +00:00
Jason Uh
323843f397 8021804: Certpath validation fails if validity period of root cert does not include validity period of intermediate cert 
Reviewed-by: mullan
 2014-03-12 08:55:35 -07:00
Weijun Wang
e83e738c09 8035963: The failed Kerberos tests due to timeouts 
Reviewed-by: alanb, xuelei
 2014-03-12 14:18:01 +08:00
Weijun Wang
fd6995ab56 8036971: krb5.conf does not accept directive lines before the first section 
Reviewed-by: xuelei
 2014-03-11 07:56:49 +08:00
Jason Uh
d6207a4ca5 8036844: test failures due to wrong keystore paths 
Reviewed-by: weijun
 2014-03-07 10:40:03 -08:00
Xue-Lei Andrew Fan
521f9a2048 8032473: Restructure JSSE regression test hierarchy in jdk test 
Reviewed-by: weijun
 2014-03-05 07:24:34 +00:00
Weijun Wang
0903468259 8036104: Rename the PAData.java test 
Reviewed-by: xuelei
 2014-03-03 10:55:31 +08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013 
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
 2013-12-26 12:04:16 -08:00
Michael Cui
dca4d10631 8028711: TEST_BUG: Shell tests should pass through VM options 
Reviewed-by: alanb
 2014-02-13 15:59:04 +00:00
Weijun Wang
2b7c6c0d41 8034762: Move krb5.conf related tests into a single place 
Reviewed-by: xuelei
 2014-02-12 19:20:43 +08:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Weijun Wang
49fdbfba20 8031572: jarsigner -verify exits with 0 when a jar file is not properly signed 
Reviewed-by: mullan
 2014-01-25 18:16:33 +08:00
Vladimir Kozlov
9c83896027 Merge 2014-01-22 14:17:32 -08:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX 
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
 2014-01-17 21:54:30 +01:00
Abhijit Saha
a9a038efa7 Merge 2014-01-15 10:09:00 -08:00
Xue-Lei Andrew Fan
ca25819893 8031566: regression test failure, SSLEngineBadBufferArrayAccess.java 
Reviewed-by: mullan
 2014-01-14 06:41:10 -08:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property 
Reviewed-by: mullan, weijun
 2014-01-13 21:12:58 -08:00
Xue-Lei Andrew Fan
15c7afef94 8028518: Increase the priorities of GCM cipher suites 
Reviewed-by: wetmore
 2014-01-13 20:56:18 -08:00
Chris Hegarty
be247dff24 Merge 2014-01-10 15:04:46 +00:00
Weijun Wang
74e666c00e 8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt 
Reviewed-by: xuelei
 2013-12-30 11:51:19 +08:00
Xue-Lei Andrew Fan
3b4a745b26 8025415: Test SSLSocketImplThrowsWrongExceptions.java timed out 
Reviewed-by: weijun
 2013-12-24 20:07:12 -08:00
Xue-Lei Andrew Fan
a46e0545ea 8030842: Intermittent test failure SSLSocketTimeoutNulls.java 
Reviewed-by: weijun
 2013-12-19 22:59:21 -08:00
Xue-Lei Andrew Fan
ffe3f52e17 7093640: Enable client-side TLS 1.2 by default 
Reviewed-by: weijun, mullan, wetmore
 2013-12-19 02:27:25 -08:00
Alan Bateman
76a5534d5b 8029904: Remove com.sun.security.auth.callback.DialogCallbackHandler 
Reviewed-by: mullan
 2013-12-16 15:05:26 +00:00
Zaiyao Liu
7c18844372 8028562: Test SSLSocketSSLEngineTemplate.java intermittent failed with "Data length error" 
Test stabilization, read one more time in case of message fragment

Reviewed-by: mullan, xuelei
 2013-12-15 20:24:45 -08:00
Anthony Scarpino
3c1c57bbbd 8027218: TEST_BUG: sun/security/pkcs11/ec tests fail because of ever-changing key size restrictions 
Reviewed-by: vinnie
 2013-12-04 10:59:17 -08:00
Valerie Peng
0e30b48211 Merge 2013-12-03 17:25:28 -08:00
Valerie Peng
ad74259a34 8029158: sun/security/pkcs11/Signature/TestDSAKeyLength.java does not compile (or run) 
Add the missing library path and skip testing against NSS 1.14 or later due to known NSS issue

Reviewed-by: vinnie, ascarpino
 2013-12-03 17:23:58 -08:00
Weijun Wang
7ddfe32e7b 8028351: JWS doesn't get authenticated when using kerberos auth proxy 
Reviewed-by: xuelei
 2013-12-04 09:14:42 +08:00
Vinnie Ryan
9dae7f5c55 8029369: Shell tests in sun/security/pkcs11/ do not compile PKCS11Test 
Reviewed-by: mullan
 2013-12-02 14:19:25 +00:00
Rajan Halade
dec69128e0 8021418: Intermittent: SSLSocketSSLEngineTemplate.java test fails with timeout 
Reviewed-by: xuelei, wetmore
 2013-11-27 15:25:36 -08:00
Weijun Wang
d4a597432b 8029181: ts.sh generates invalid file after JDK-8027026 
Reviewed-by: vinnie, mullan
 2013-11-27 09:56:38 +08:00
Valerie Peng
5e6a93fc20 7200306: SunPKCS11 provider delays the check of DSA key size for SHA1withDSA to sign() instead of init() 
Add key length checks to P11Signature class

Reviewed-by: mullan
 2013-11-25 11:56:53 -08:00
Lana Steuck
33cd414e58 Merge 2013-11-25 09:40:25 -08:00
Lana Steuck
1a633e63a9 Merge 2013-11-15 07:14:23 -08:00
Vinnie Ryan
242d5a95bd 8028377: test/sun/security/provider/KeyStore/DKSTest.sh attempts to write to ${test.src} 
Reviewed-by: alanb, weijun
 2013-11-19 15:39:58 +00:00
Weijun Wang
ab91495c0e 8028479: runNameEquals still cannot precisely detect if a usable native krb5 is available 
Reviewed-by: xuelei
 2013-11-19 14:14:14 +08:00
Rajan Halade
7ba208e79f 8014266: regression test AsyncSSLSocketClose.java time out 
Reviewed-by: xuelei
 2013-11-14 16:08:28 -08:00
Xue-Lei Andrew Fan
cc6f28352f 8023147: Test DisabledShortRSAKeys.java intermittent failed 
Reviewed-by: mullan
 2013-11-13 01:14:23 -08:00
Sergey Bylokhov
9ab430a0d2 8027696: Incorrect copyright header in the tests 
Reviewed-by: alanb, malenkov, mullan
 2013-11-12 20:24:25 +04:00
Weijun Wang
4780d5d560 8027991: InputStream should be closed in sun.security.tools.jarsigner.Main 
Reviewed-by: xuelei
 2013-11-11 16:54:41 +08:00
Abhijit Saha
15d051e851 Merge 2013-12-07 16:15:08 -08:00
Chris Hegarty
388f28f83b Merge 2013-10-21 15:00:56 +01:00
Leif Samuelsson
a25177c60e 7025699: Policy Tool is not accessible by keyboard 
Reviewed-by: alexp, weijun
 2013-10-18 08:57:52 +08:00
Jason Uh
9419bb4f59 8026233: test/sun/security/tools/keytool/StorePasswords.java needs to clean up files 
Reviewed-by: vinnie
 2013-10-17 12:00:20 -07:00
Weijun Wang
286d559a2f 8026712: TEST_BUG: update sun/security/tools/keytool/autotest.sh with a new location to find of libsoftokn3.so 
Reviewed-by: vinnie
 2013-10-17 20:56:07 +08:00
Weijun Wang
9132d85a65 8027026: Change keytool -genkeypair to use -keyalg RSA 
Reviewed-by: alanb, chegar, mullan
 2013-10-23 08:32:03 +08:00
Xue-Lei Andrew Fan
ec67e938e2 8026119: Regression test DHEKeySizing.java failing intermittently 
Reviewed-by: weijun
 2013-10-13 21:10:33 -07:00
Lana Steuck
5db317fd23 Merge 2013-10-10 13:33:02 -07:00
Weijun Wang
8f5279cf87 8026235: keytool NSS test should use 64 bit lib on Solaris 
Reviewed-by: vinnie
 2013-10-10 15:24:41 +08:00
Valerie Peng
4ff4823dfc Merge 2013-10-09 13:07:58 -07:00
Artem Smotrakov
36b94773c9 8026037: [TESTBUG] sun/security/tools/jarsigner/warnings.sh test fails on Solaris 
Reviewed-by: chegar
 2013-10-09 18:58:16 +08:00
Valerie Peng
2f4af22f17 7196382: PKCS11 provider should support 2048-bit DH 
Query and enforce range checking using the values from native PKCS11 library.

Reviewed-by: xuelei
 2013-10-08 11:07:31 -07:00
Xue-Lei Andrew Fan
1d8fbe7d05 6956398: make ephemeral DH key match the length of the certificate key 
Reviewed-by: weijun
 2013-10-07 18:46:28 -07:00
Chris Hegarty
6c1acc1638 Merge 2013-10-04 14:51:17 +01:00
David Katleman
b4c28b3b28 Merge 2013-10-01 12:45:47 -07:00
Kumar Srinivasan
a210a6a74e 8020552: [launcher] changes to support removal of Solaris 32-bit distribution 
8023495: [infra] create 64-bit solaris bits with symlinks

Reviewed-by: ihse, tbell, dholmes, darcy, alanb, erikj, sla, martin
 2013-09-27 16:29:44 -07:00
Vinnie Ryan
f36ff9e467 8008171: Refactor KeyStore.DomainLoadStoreParameter as a standalone class 
Reviewed-by: mullan, weijun
 2013-10-09 10:48:44 +01:00
Weijun Wang
cccb39a270 8024302: Clarify jar verifications 
8023338: Update jarsigner to encourage timestamping

Reviewed-by: mullan, ahgross
 2013-09-19 10:40:16 +08:00
Xue-Lei Andrew Fan
d5c45c6cde 8024444: Change to use othervm mode of tests in SSLEngineImpl 
Reviewed-by: mullan
 2013-09-09 19:07:05 -07:00
Weijun Wang
a4c7971bdb 8024046: Test sun/security/krb5/runNameEquals.sh failed on 7u45 Embedded linux-ppc* 
Reviewed-by: xuelei
 2013-09-09 11:08:20 +08:00
Xue-Lei Andrew Fan
8b9c8247a8 7188657: There should be a way to reorder the JSSE ciphers 
Reviewed-by: weijun, wetmore
 2013-09-07 17:05:22 -07:00
Vinnie Ryan
cbe29b7b72 8008296: keytool utility doesn't support '-importpassword' command 
Reviewed-by: weijun
 2013-10-04 16:05:55 +01:00
Weijun Wang
5ae304e238 8012615: Realm.getRealmsList returns realms list in wrong 
Reviewed-by: valeriep, xuelei
 2013-09-18 18:22:49 +08:00
Bradford Wetmore
47f46da3fa 8025694: Rename getStrongSecureRandom based on feedback 
8014838: getStrongSecureRandom() should require at least one implementation

Reviewed-by: mullan, darcy
 2013-10-02 09:38:57 -07:00
Artem Smotrakov
54ebd8d42e 8025123: SNI support in Kerberos cipher suites 
Reviewed-by: weijun, xuelei
 2013-10-01 20:25:44 -07:00
Anthony Scarpino
cf7cbcdce8 8004283: test/sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failing intermittently 
Reviewed-by: vinnie
 2013-09-18 14:57:29 -07:00
Weijun Wang
b16be80c6b 8024861: Incomplete token triggers GSS-API NullPointerException 
Reviewed-by: mullan
 2013-09-27 15:25:18 +08:00
Weijun Wang
c5fd247e16 8022761: regression: SecurityException is NOT thrown while trying to pack a wrongly signed Indexed Jar file 
Reviewed-by: sherman
 2013-08-27 17:50:55 +08:00
Weijun Wang
849788a425 8015669: KerberosPrincipal::equals should ignore name-type 
Reviewed-by: mullan
 2013-08-27 17:50:52 +08:00
Xue-Lei Andrew Fan
cac8b88f48 8022228: Intermittent test failures in sun/security/ssl/javax/net/ssl/NewAPIs 
Reviewed-by: weijun
 2013-08-21 19:44:35 -07:00
Xue-Lei Andrew Fan
2e2313ef87 8020842: IDN do not throw IAE when hostname ends with a trailing dot 
Reviewed-by: weijun, michaelm
 2013-08-19 17:42:39 -07:00
Xue-Lei Andrew Fan
1cff90b335 8024068: sun/security/ssl/javax/net/ssl/ServerName/IllegalSNIName.java fails 
Reviewed-by: weijun
 2013-09-01 20:00:03 -07:00
Weijun Wang
9688bbb771 8021789: jarsigner parses alias as command line option (depending on locale) 
Reviewed-by: vinnie
 2013-08-02 08:59:37 +08:00
Anthony Scarpino
eae349e914 8020424: The NSS version should be detected before running crypto tests 
Reviewed-by: valeriep
 2013-07-29 13:43:24 -07:00
Anthony Scarpino
a7dbbbddcd 8012971: PKCS11Test hiding exception failures 
Reviewed-by: vinnie, valeriep
 2013-07-19 11:34:33 -07:00
Lana Steuck
ac26dd6009 Merge 2013-07-26 15:16:53 -07:00
Rajan Halade
26d9259db7 8019544: Need to run ProviderTest.java in othervm mode 
Reviewed-by: wetmore, xuelei, vinnie
 2013-07-26 14:16:53 -07:00
Lana Steuck
29041e2c4a Merge 2013-07-26 14:07:32 -07:00
Jason Uh
e01b8f673e 8016916: UnstructuredName should support DirectoryString 
Reviewed-by: mullan
 2013-07-24 12:48:10 -07:00
Lana Steuck
ee1b9621d9 Merge 2013-07-22 17:37:15 -07:00
Weijun Wang
2842af69c0 8019410: sun/security/krb5/auto/ReplayCacheTestProc.java 
Reviewed-by: mullan
 2013-07-13 08:47:49 +08:00
David Katleman
1ad2c364d6 8020414: JDK8 b98 source with GPL header errors 
Reviewed-by: darcy, lancea, iris
 2013-07-11 14:03:31 -07:00
Valerie Peng
a4223b53c1 8020321: Problem in PKCS11 regression test TestRSAKeyLength 
Corrected the "isValidKeyLength" array

Reviewed-by: xuelei
 2013-07-11 11:43:23 -07:00
Weijun Wang
2241a3720d 8019267: NPE in AbstractSaslImpl when trace level >= FINER in KRB5 
Reviewed-by: mullan
 2013-07-10 15:11:32 +08:00
Bradford Wetmore
2c7b97640d 8019341: Update CookieHttpsClientTest to use the newer framework 
Reviewed-by: xuelei, smarks, michaelm
 2013-07-05 18:22:58 -07:00
Xue-Lei Andrew Fan
d22a89a1ae 8017049: rename property jdk.tls.rejectClientInitializedRenego 
Reviewed-by: vinnie, wetmore, mullan
 2013-06-26 06:32:40 -07:00
Weijun Wang
cb9be51085 8017453: ReplayCache tests fail on multiple platforms 
Reviewed-by: xuelei
 2013-06-24 16:25:28 +08:00
Weijun Wang
af996219c7 8001326: Improve Kerberos caching 
Reviewed-by: valeriep
 2013-06-21 18:26:13 +08:00
Xue-Lei Andrew Fan
b0246ef1ae 8017157: catch more exception in test RejectClientRenego 
Reviewed-by: vinnie
 2013-06-20 07:48:49 -07:00
Xue-Lei Andrew Fan
1ead1fc8bc 7188658: Add possibility to disable client initiated renegotiation 
Reviewed-by: weijun, wetmore
 2013-06-19 02:33:07 -07:00
Xue-Lei Andrew Fan
7384a4704e 8000456: Add programmatic deadlock detection in SSLEngineDeadlock 
Reviewed-by: wetmore
 2013-06-18 18:50:13 -07:00
Weijun Wang
1e0ca48079 8015274: TEST_BUG: Step2: After selecting 'View Warning Log', it is empty instead of FileNotFound 
8015276: TEST_BUG: The 'ptool.test' can't be saved in the 'tmp' folder
8016158: Instruction is not clear on how to use keytool to create JKS store in case

Reviewed-by: mullan
 2013-06-13 10:00:00 +08:00
Weijun Wang
77e684366c 8014310: JAAS/Krb5LoginModule using des encytypes failure with NPE after JDK-8012679 
Reviewed-by: valeriep
 2013-06-13 09:59:29 +08:00
Pasi Eronen
b888136f12 8014618: Need to strip leading zeros in TlsPremasterSecret of DHKeyAgreement 
Reviewed-by: xuelei
 2013-05-30 22:02:43 -07:00
Weijun Wang
c43d7aa0de 8014196: ktab creates a file with zero kt_vno 
Reviewed-by: valeriep
 2013-05-24 17:15:43 +08:00
Vinnie Ryan
193ed72708 Merge 2013-05-16 02:43:58 -07:00
Stephen Flores
c39030c7b3 7194075: Various classes of sunec.jar are duplicated in rt.jar 
Reviewed-by: mullan, vinnie
 2013-05-14 18:08:18 +01:00
Valerie Peng
fe625d26a3 Merge 2013-05-13 16:52:33 -07:00
Anthony Scarpino
2c0b00cbe0 8001284: Buffer problems with SunPKCS11-Solaris and CKM_AES_CTR 
Changed output length calculation to include incomplete blocks for CTR mode.

Reviewed-by: valeriep
 2013-05-07 14:13:53 -07:00
Valerie Peng
94c8fa5cb1 7196009: SunPkcs11 provider fails to parse config path containing parenthesis 
Enhanced to allow quoted string as library path values.

Reviewed-by: weijun
 2013-05-07 14:06:19 -07:00
Weijun Wang
5ec35be1d2 8010192: Enable native JGSS provider on Mac 
Reviewed-by: valeriep
 2013-05-07 12:30:36 +08:00
Jason Uh
b762ba9ab4 8005922: TEST_BUG: There is no /tmp directory for windows system 
Reviewed-by: weijun
 2013-05-03 15:04:54 -07:00
Jason Uh
33196b314d 8007699: Move some tests from test/sun/security/provider/certpath/X509CertPath to closed repo 
Reviewed-by: mullan
 2013-05-09 12:00:46 -07:00
Weijun Wang
0c02ab3a5e 8012679: Let allow_weak_crypto default to false 
Reviewed-by: valeriep
 2013-05-08 08:25:34 +08:00
Weijun Wang
905250cdfe 8012082: SASL: auth-conf negotiated, but unencrypted data is accepted, reset to unencrypt 
Reviewed-by: vinnie
 2013-05-01 21:05:10 +08:00
Weijun Wang
70b23a07be 8005523: Unbound krb5 for TLS 
Reviewed-by: xuelei
 2013-04-27 18:25:16 +08:00
Alan Bateman
d51ab5c39c 8012530: test/sun/security/provider/SecureRandom/StrongSeedReader.java failing 
Reviewed-by: wetmore
 2013-04-25 17:10:36 -07:00
Weijun Wang
0ec3fd796b 8005527: [TEST_BUG] console.sh failed Automatically with exit code 1 
Reviewed-by: xuelei
 2013-04-22 11:39:53 +08:00
Weijun Wang
ab7ecdd1b3 8009636: JARSigner including TimeStamp PolicyID (TSAPolicyID) as defined in RFC3161 
Reviewed-by: mullan
 2013-04-19 15:41:11 +08:00
Vinnie Ryan
74d720c7b5 Merge 2013-04-17 02:53:02 -07:00
Weijun Wang
dfcf6055a7 8011124: Make KerberosTime immutable 
Reviewed-by: xuelei
 2013-04-17 10:15:33 +08:00
Bradford Wetmore
63a6638ebf 6425477: Better support for generation of high entropy random numbers 
Reviewed-by: xuelei, weijun, mullan
 2013-04-11 21:03:24 -07:00
Xue-Lei Andrew Fan
a973a4d533 8011680: Re-integrate AEAD implementation of JSSE 
It is a re-merge of JDK-7030966.

Reviewed-by: wetmore
 2013-04-11 18:57:14 -07:00
Weijun Wang
b02989edef 8011867: Accept unknown PKCS #9 attributes 
Reviewed-by: vinnie
 2013-04-11 11:09:50 +08:00
Weijun Wang
7d8e86633a 8005460: [findbugs] Probably returned array should be cloned 
Reviewed-by: xuelei
 2013-04-11 10:58:17 +08:00
Weijun Wang
4a64ecdf42 8010125: keytool -importkeystore could create a pkcs12 keystore with different storepass and keypass 
Reviewed-by: vinnie
 2013-03-28 20:27:53 +08:00
Weijun Wang
5f08966515 8009875: Provide a default udp_preference_limit for krb5.conf 
Reviewed-by: valeriep
 2013-03-23 11:49:39 +08:00
Lana Steuck
31330fc47a Merge 2013-03-12 19:04:49 -07:00
Bradford Wetmore
9e5da0ad31 8009925: Back out AEAD CipherSuites temporarily 
Reviewed-by: valeriep
 2013-03-12 15:31:49 -07:00
Weijun Wang
2ec1224ff0 8000653: SPNEGO tests fail at context.getDelegCred().getRemainingInitLifetime(mechOid) 
Reviewed-by: valeriep
 2013-03-09 17:27:58 +08:00
Sean Mullan
6190b5040a Merge 2013-03-01 16:15:23 -05:00
Sean Mullan
6cd495e473 8008908: Access denied when invoking Subject.doAsPrivileged() 
Wildcard principal names are not processed correctly

Reviewed-by: xuelei
 2013-03-01 16:12:50 -05:00
Xue-Lei Andrew Fan
9abb185430 7030966: Support AEAD CipherSuites 
Reviewed-by: weijun, wetmore, valeriep
 2013-03-01 02:34:34 -08:00
Edvard Wendelin
2f5be3ab0d Merge 2013-02-25 08:44:00 +01:00
Mark Sheppard
ec9e303630 8006182: cleanup to use java.util.Base64 in java security component, providers, and regression tests 
Refactored code to use java.util.Base64 Mime Encoder and Decoder as a replacement for sun.misc.BASE64Encoder and sun.misc.BASE64Decoder

Reviewed-by: vinnie, chegar, sherman
 2013-02-21 20:01:22 +00:00
Edvard Wendelin
cbfc80d987 Merge 2013-02-19 21:48:01 +01:00
David Holmes
390cc1d7a1 Merge 2013-02-17 16:44:19 -05:00
Vinnie Ryan
8f58ebc261 8007755: Support the logical grouping of keystores 
Reviewed-by: mullan
 2013-02-13 19:40:51 +00:00
Weijun Wang
d8233ec657 8001104: Unbound SASL service: the GSSAPI/krb5 mech 
Reviewed-by: valeriep
 2013-02-09 16:43:49 +08:00
Edvard Wendelin
11036fb4d5 Merge 2013-02-05 15:35:35 +01:00
Vinnie Ryan
85c0519ca6 8007483: attributes are ignored when loading keys from a PKCS12 keystore 
Reviewed-by: mullan
 2013-02-05 14:25:47 +00:00
David Holmes
eb1726c151 Merge 2013-02-04 18:08:50 -05:00
Vinnie Ryan
ddbfa5fe53 8006994: Cleanup PKCS12 tests to ensure streams get closed 
Reviewed-by: mullan
 2013-02-04 17:20:26 +00:00
Weijun Wang
0c6cb9cdc2 8006564: Test sun/security/util/Oid/S11N.sh fails with timeout on Linux 32-bit 
Reviewed-by: alanb
 2013-02-01 07:39:41 +08:00
Vinnie Ryan
3727e751f6 8006855: PKCS12 test failures due to unsupported algorithm 
Reviewed-by: mullan
 2013-01-24 16:44:15 +00:00
Vinnie Ryan
b680bc8ca7 8005408: KeyStore API enhancements 
Reviewed-by: mullan
 2013-01-23 23:13:54 +00:00
Chris Hegarty
12e480040a 8006669: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/PostThruProxy.sh fails on mac 
Reviewed-by: alanb
 2013-01-23 14:45:44 +00:00
Alan Bateman
a23a1a942b 8004502: Compact Profiles contents 
Reviewed-by: dholmes, mchung
 2013-01-21 23:35:36 -05:00
Jason Uh
3d92cb12a6 8006092: SecurityPermission: printIdentity doesn't exist 
Reviewed-by: weijun
 2013-01-21 15:05:49 +08:00
Jason Uh
5d2a6972af 8005939: sun/security/x509/{X509CRLImplX509CertImpl}/Verify.java fail in confusing way when some providers not present 
Reviewed-by: mullan, weijun
 2013-01-16 13:35:17 -05:00
Jason Uh
68eb431db8 8005389: Backout fix for JDK-6500133 
Reviewed-by: mullan
 2013-01-16 09:51:21 -05:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools 
Reviewed-by: chegar
 2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697 Merge 2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815 Merge 2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac 7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator 
Add new java.security.Principal.implies method

Reviewed-by: alanb
 2013-01-08 19:00:12 -05:00
Weijun Wang
d9c892c9fd 8005447: default principal should act as anyone 
Reviewed-by: valeriep
 2013-01-08 14:54:56 +08:00
Lana Steuck
b7af263526 Merge 2012-12-28 18:36:41 -08:00
Xue-Lei Andrew Fan
6d41a58c82 7109274: Restrict the use of certificates with RSA keys less than 1024 bits 
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.

Reviewed-by: mullan
 2012-12-28 00:48:12 -08:00
David Katleman
306cab1006 8004982: JDK8 source with GPL header errors 
Reviewed-by: ohair
 2012-12-20 16:24:50 -08:00
Weijun Wang
5ded9d47a1 7197159: accept different kvno if there no match 
Reviewed-by: xuelei
 2012-12-17 12:18:46 +08:00
Mark Sheppard
c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS 
Reviewed-by: chegar, alanb
 2012-12-13 14:47:35 +00:00
Jason Uh
e3c39dffe5 7193792: sun/security/pkcs11/ec/TestECDSA.java failing intermittently 
Reviewed-by: vinnie, wetmore
 2012-12-13 09:35:35 -05:00
Weijun Wang
2be2f20b65 8004488: wrong permissions checked in krb5 
Reviewed-by: xuelei
 2012-12-11 13:14:56 +08:00