Commit Graph

203 Commits

Author SHA1 Message Date
Xue-Lei Andrew Fan
5798f5bb9d 6952814: sun/security/ssl/com/sun/net/ssl/internal/ssl/InputRecord/InterruptedIO.java failing in PIT
Reviewed-by: alanb
2011-06-22 19:37:18 -07:00
Weijun Wang
9ce9d5e6ba 7043737: klist does not detect non-existing keytab
Reviewed-by: valeriep
2011-06-08 14:01:34 +08:00
Weijun Wang
61e1313498 7040151: SPNEGO GSS code does not parse tokens in accordance to RFC 2478
Reviewed-by: valeriep
2011-05-03 02:48:59 +08:00
Weijun Wang
317bcf10c2 7040916: DynamicKeyTab test fails on Windows
Reviewed-by: xuelei
2011-05-01 14:22:32 +08:00
Vinnie Ryan
f202396944 6578658: Request for raw RSA (NONEwithRSA) Signature support in SunMSCAPI
Reviewed-by: wetmore
2011-04-29 00:21:54 +01:00
Vinnie Ryan
5f5ccc0a66 Merge 2011-04-27 20:24:30 +01:00
Vinnie Ryan
8c88165312 6753664: Support SHA256 (and higher) in SunMSCAPI
Reviewed-by: mullan
2011-04-27 20:21:32 +01:00
Weijun Wang
a9a765fdfc 6950929: Failures on Solaris sparc 64bit sun/security/krb5/auto/BadKdc4.java (and linux?)
Reviewed-by: xuelei
2011-04-27 17:11:06 +08:00
Vinnie Ryan
dc6eb040b7 6931562: Support SunMSCAPI Security Provider in Windows 64-bit releases of JVM
Reviewed-by: mullan
2011-04-22 17:03:51 +01:00
Vinnie Ryan
5982362c7d Merge 2011-04-21 14:25:46 +01:00
Vinnie Ryan
c74acca8b0 6888925: SunMSCAPI's Cipher can't use RSA public keys obtained from other sources
Reviewed-by: mullan
2011-04-21 14:23:57 +01:00
Weijun Wang
68d5cd6f23 6894072: always refresh keytab
Reviewed-by: valeriep
2011-04-20 18:41:32 +08:00
Lana Steuck
b99716e22a Merge 2011-04-17 16:19:29 -07:00
Valerie Peng
16ddb7350c 7035115: sun/security/pkcs11/Provider/ConfigShortPath.java compilation failed
Updated the test to use reflection and skip when SunPKCS11 provider not present.

Reviewed-by: weijun
2011-04-15 15:56:12 -07:00
Kelly O'Hair
7c8e01891a Merge 2011-04-13 16:56:16 -07:00
Valerie Peng
86875ab33d 6986789: Sun pkcs11 provider fails to parse path name containing "+"
Modified to accept '+' as valid character.

Reviewed-by: weijun
2011-04-12 16:09:17 -07:00
Weijun Wang
6f7b1ef68a 7030180: AES 128/256 decrypt exception
Reviewed-by: valeriep
2011-04-11 10:22:39 +08:00
Xue-Lei Andrew Fan
2a48e38d0f 6976117: SSLContext.getInstance("TLSv1.1") returns SSLEngines/SSLSockets without TLSv1.1 enabled
Reorg the SSLContext implementation

Reviewed-by: weijun
2011-04-08 02:00:09 -07:00
Kelly O'Hair
d2b1e20c7d 7033660: Update copyright year to 2011 on any files changed in 2011
Reviewed-by: dholmes
2011-04-06 22:06:11 -07:00
Weijun Wang
2c02243de9 7032354: no-addresses should not be used on acceptor side
Reviewed-by: valeriep
2011-04-07 08:51:33 +08:00
Weijun Wang
680370af5b 7031536: test/sun/security/krb5/auto/HttpNegotiateServer.java should not use static ports
Reviewed-by: xuelei
2011-03-28 18:04:17 +08:00
Weijun Wang
1ce7eeaa52 7019384: Realm.getRealmsList returns realms list in wrong (reverse) order
Reviewed-by: xuelei
2011-03-28 18:04:10 +08:00
Xue-Lei Andrew Fan
4efe3a9cb7 7027797: take care of ECDH_anon/DH_anon server key exchange for TLS 1.2
The signature of server key exanage message could be null

Reviewed-by: vinnie
2011-03-21 22:02:00 -07:00
Xue-Lei Andrew Fan
7705e63e30 7022855: Export "PKIX" as the standard algorithm name of KeyManagerFactory
Export the existing "NewSunX509" algorithm implementation using the standard name "PKIX"

Reviewed-by: weijun, wetmore
2011-03-15 23:13:35 -07:00
Vinnie Ryan
328f8c8455 6986477: sun/security/mscapi/AccessKeyStore.sh test is failing on jdk7
Reviewed-by: valeriep
2011-03-11 09:55:03 +00:00
Valerie Peng
1daa47b01d 6994008: PKCS11 should support "RSA" and "RSA/ECB/NoPadding" ciphers
Add support for RSA_X_509 mechanism and aliasing of "RSA" to "RSA/ECB/PKCS1Padding".

Reviewed-by: wetmore
2011-03-07 14:14:37 -08:00
Weijun Wang
314c75c742 7020531: test: java/security/cert/CertificateFactory/openssl/OpenSSLCert.java file not closed after run
Reviewed-by: alanb, smarks
2011-03-01 16:22:22 +08:00
Weijun Wang
b777a1fbae 7021789: Remove jarsigner -crl option
Reviewed-by: mullan
2011-02-28 23:02:37 +08:00
Valerie Peng
4ce8048909 6604496: Support for CKM_AES_CTR (counter mode)
Enhanced SunPKCS11 provider to support AES/CTR/NoPadding transformation.

Reviewed-by: vinnie
2011-02-22 12:01:35 -08:00
Weijun Wang
d4fbb08ec0 7018928: test failure: sun/security/krb5/auto/SSL.java
Reviewed-by: valeriep
2011-02-15 12:11:15 +08:00
Sean Coffey
6ed5196d7d 7016897: Copyright header correction : test/sun/security/provider/SeedGenerator/SeedGeneratorChoice.java
Reviewed-by: vinnie
2011-02-03 11:28:04 +00:00
Xue-Lei Andrew Fan
85a3f20cef 7011497: new CertPathValidatorException.BasicReason enum constant for constrained algorithm
Add new BasicReason and improve trust anchor searching method during cert path validation

Reviewed-by: mullan
2011-02-01 04:45:10 -08:00
Stuart Marks
ba58eb7896 7012003: diamond conversion for ssl
Reviewed-by: wetmore
2011-01-14 15:31:45 -08:00
Stuart Marks
07549260db 7008713: diamond conversion of kerberos5 and security tools
Reviewed-by: weijun
2011-01-12 13:52:09 -08:00
Lana Steuck
fb91d40572 Merge 2011-01-04 17:05:38 -08:00
Kelly O'Hair
6b6a611c8e 6962318: Update copyright year
Reviewed-by: xdono
2010-12-28 15:53:50 -08:00
Valerie Peng
16faa79cf4 6581254: pkcs11 provider fails to parse configuration file contains windows short path
Modified configuration parsing code to support "~".

Reviewed-by: weijun
2010-12-22 18:30:34 -08:00
Weijun Wang
fdbca6b5f6 6975866: api/org_ietf/jgss/GSSContext/index.html#wrapUnwrapIOTest started to fail since jdk7 b102
Reviewed-by: valeriep
2010-12-17 11:03:33 +08:00
Sean Coffey
6c39971cb7 6998583: NativeSeedGenerator is making 8192 byte read requests from entropy pool on each init
Reviewed-by: wetmore, andrew, vinnie
2010-12-10 15:11:47 +00:00
Weijun Wang
d9f1152680 6896700: Validation of signatures succeed when it should fail
Reviewed-by: wetmore
2010-12-06 10:48:18 +08:00
Weijun Wang
6ad8ffe59b 7004168: jarsigner -verify checks for KeyUsage codesigning ext on all certs instead of just signing cert
Reviewed-by: mullan
2010-12-06 10:46:26 +08:00
Weijun Wang
1d7abe0313 7004035: signed jar with only META-INF/* inside is not verifiable
Reviewed-by: mullan
2010-12-06 10:46:18 +08:00
Weijun Wang
3281356d0f 7004721: ktarg.sh fails when there's no default realm
Reviewed-by: xuelei
2010-12-06 06:49:18 +08:00
Weijun Wang
9f743252e5 7002036: ktab return code changes on a error case
Reviewed-by: valeriep
2010-11-24 07:43:06 +08:00
Weijun Wang
11c0d2dbec 6979329: CCacheInputStream fails to read ticket cache files from Kerberos 1.8.1
Reviewed-by: valeriep
2010-11-22 09:43:58 +08:00
Valerie Peng
358ee90f29 6720456: New 4150 may have larger blowfish keysizes
Changed to use TBD value instead of FAIL

Reviewed-by: weijun
2010-11-19 17:05:47 -08:00
Valerie Peng
0ec3c185d5 6687725: Internal PKCS5Padding impl should throw IllegalBlockSizeException and not BadPaddingException
Changed to throw IllegalBlockSizeException when the data length isn't multiples of block size

Reviewed-by: wetmore
2010-11-15 14:38:41 -08:00
Weijun Wang
707e6f0318 6960894: Better AS-REQ creation and processing
Reviewed-by: valeriep
2010-11-12 21:33:14 +08:00
Weijun Wang
2fa98fdbd7 6987827: security/util/Resources.java needs improvement
Reviewed-by: valeriep
2010-11-11 15:51:12 +08:00
Weijun Wang
5b6c23c809 6952519: kdc_timeout is not being honoured when using TCP
Reviewed-by: valeriep
2010-11-09 08:34:11 +08:00