Commit Graph

140 Commits

Author SHA1 Message Date
Fernando Guallini
2047da7dcc 8265297: javax/net/ssl/SSLSession/TestEnabledProtocols.java failed with "RuntimeException: java.net.SocketException: Connection reset"
Reviewed-by: xuelei, rhalade
2021-06-17 16:23:56 +00:00
Xue-Lei Andrew Fan
266702451d 8266881: Enable debug log for SSLEngineExplorerMatchedSNI.java
Reviewed-by: hchao, mullan
2021-05-13 18:53:52 +00:00
Fernando Guallini
79adc16fd8 8264152: javax/net/ssl/DTLS/RespondToRetransmit.java timed out
Reviewed-by: xuelei
2021-04-16 16:51:41 +00:00
Fernando Guallini
f4e639577e 8264190: Harden TLS interop tests
Reviewed-by: rhalade
2021-04-12 21:04:10 +00:00
John Jiang
99b4bab366 8263188: JSSE should fail fast if there isn't supported signature algorithm
Reviewed-by: xuelei
2021-03-29 05:53:05 +00:00
Sibabrata Sahoo
036ae0ea3e 8225438: javax/net/ssl/TLSCommon/TestSessionLocalPrincipal.java failed with Read timed out
Reviewed-by: xuelei, rhalade, hchao
2021-03-23 06:48:01 +00:00
John Jiang
4f4d0f5366 8261969: SNIHostName should check if the encoded hostname conform to RFC 3490
Reviewed-by: rhalade, xuelei
2021-03-02 22:36:28 +00:00
Jamil Nimeh
a30fb4fc68 8255867: SignatureScheme JSSE property does not preserve ordering in handshake messages
Reviewed-by: xuelei
2021-02-22 22:18:11 +00:00
Clive Verghese
63f8fc87cd 8259662: Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl
Reviewed-by: xuelei
2021-02-22 18:36:30 +00:00
Fernando Guallini
0a50688dec 8241372: Several test failures due to javax.net.ssl.SSLException: Connection reset
Reviewed-by: dfuchs, rhalade
2021-02-16 18:54:39 +00:00
Xue-Lei Andrew Fan
81db63e8d7 8259517: Incorrect test path in test cases
Reviewed-by: weijun
2021-01-10 04:36:12 +00:00
Xue-Lei Andrew Fan
b575dd80b6 8258914: javax/net/ssl/DTLS/RespondToRetransmit.java timed out
Reviewed-by: wetmore
2020-12-25 04:25:20 +00:00
Jamil Nimeh
d80ae05f61 8166596: TLS support for the EdDSA signature algorithm
Reviewed-by: xuelei
2020-12-03 06:12:07 +00:00
Anthony Scarpino
cc1915b3b3 8253821: Improve ByteBuffer performance with GCM
Reviewed-by: xuelei, valeriep
2020-12-02 23:10:32 +00:00
Sean Mullan
c0719605e7 8257083: Security infra test failures caused by JDK-8202343
Reviewed-by: xuelei
2020-11-30 13:31:47 +00:00
Sean Mullan
3a4b90f086 8202343: Disable TLS 1.0 and 1.1
Reviewed-by: xuelei, dfuchs, coffeys
2020-11-19 14:15:57 +00:00
Anthony Scarpino
0b83fc0150 8235710: Remove the legacy elliptic curves
Reviewed-by: xuelei, erikj
2020-09-25 02:40:36 +00:00
Xue-Lei Andrew Fan
473fa82000 8250839: Improve test template SSLEngineTemplate with SSLContextTemplate
Reviewed-by: ascarpino
2020-08-13 12:31:12 -07:00
Jamil Nimeh
2aa291ad2c 8247630: Use two key share entries
Reviewed-by: xuelei
2020-07-27 18:20:57 -07:00
Xue-Lei Andrew Fan
1faed205df 8247510: typo in IllegalHandshakeMessage
Reviewed-by: wetmore
2020-06-12 15:55:08 -07:00
Shivangi Gupta
82e3640eb1 8246330: Add TLS Tests for Legacy ECDSA curves
Reviewed-by: rhalade
2020-06-09 00:04:40 -07:00
Xue-Lei Andrew Fan
17a298962c 8206925: Support the certificate_authorities extension
Reviewed-by: mullan
2020-05-27 09:46:40 -07:00
John Jiang
98cb95b7b7 8245691: Add EdDSA certificstes to SSLSocketTemplate and CertUtils
Reviewed-by: xuelei
2020-05-25 11:29:56 +08:00
John Jiang
46cf294250 8245005: javax/net/ssl/compatibility/BasicConnectTest.java failed with No enum constant
Reviewed-by: xuelei
2020-05-16 05:49:47 +08:00
Roger Riggs
bdf672659c 8243010: Test support: Customizable Hex Printer
Reviewed-by: lancea, dfuchs, weijun
2020-04-16 15:45:37 -04:00
John Jiang
5fc5cb9f25 8243549: sun/security/ssl/CipherSuite/NamedGroupsWithCipherSuite.java failed with Unsupported signature algorithm: DSA
Reviewed-by: xuelei
2020-04-25 05:17:26 +08:00
John Jiang
2a4596cfe4 8243029: Rewrite javax/net/ssl/compatibility/Compatibility.java with a flexible interop test framework
Reviewed-by: xuelei
2020-04-24 15:28:57 +08:00
Anthony Scarpino
ed18906c08 8242008: SSLSession inconsistencies
Reviewed-by: jnimeh, xuelei
2020-04-15 13:50:41 -07:00
Jamil Nimeh
6b7a466f74 8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
Reviewed-by: xuelei
2020-04-08 00:03:56 -07:00
John Jiang
60fae77974 8237977: Further update javax/net/ssl/compatibility/Compatibility.java
Reviewed-by: rhalade
2020-03-26 07:09:36 +08:00
Xue-Lei Andrew Fan
89448a83d9 8233619: SSLEngine handshake status immediately after the handshake can be NOT_HANDSHAKING rather than FINISHED with TLSv1.3
Reviewed-by: jnimeh
2020-03-03 15:57:01 -08:00
Sibabrata Sahoo
fca342f736 8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property
Corrected Cipher Suites ordering through system properties

Reviewed-by: xuelei
2019-12-16 00:23:50 -08:00
John Jiang
abac8b17a9 8235813: System property fullCipherSuites is not used by javax/net/ssl/compatibility/Compatibility.java
Reviewed-by: xuelei
2019-12-16 16:19:10 +08:00
Sibabrata Sahoo
58cce5fbf4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-13 01:43:14 -08:00
John Jiang
c2f68eacaa 8231810: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java fails intermittently with "java.lang.Exception: Unexpected EOF"
Reviewed-by: xuelei
2019-12-11 11:29:03 +08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
2019-12-09 21:38:12 -08:00
Sibabrata Sahoo
b03ba9e300 8234723: javax/net/ssl/TLS tests support TLSv1.3
Missing TLSv1.3 test cases

Reviewed-by: xuelei
2019-11-28 22:29:07 -08:00
John Jiang
ec16834845 8234724: javax/net/ssl/templates/SSLSocketSSLEngineTemplate.java supports TLSv1.3
Reviewed-by: xuelei
2019-11-29 14:07:16 +08:00
John Jiang
655cf14138 8228967: Trust/Key store and SSL context utilities for tests
Reviewed-by: xuelei
2019-09-05 14:55:21 +08:00
Daniel Fuchs
f71db3074c 8230435: Replace wildcard address with loopback or local host in tests - part 22
Fixes tests to use the loopback address whenever possible. It also fixes some safe publishing issues, or add diagnostics in some of the tests.

Reviewed-by: michaelm
2019-09-04 18:10:07 +01:00
Jaikiran Pai
178bf44f56 8226976: SessionTimeOutTests uses == operator for String value check
Use String.equals() instead of == operator

Reviewed-by: xuelei
2019-07-02 11:07:40 +05:30
John Jiang
df6fbdb2af 8224650: Add tests to support X25519 and X448 in TLS
Reviewed-by: xuelei
2019-06-28 05:29:54 +08:00
Xue-Lei Andrew Fan
a4277e56c8 8224829: AsyncSSLSocketClose.java has timing issue
Reviewed-by: jnimeh, dfuchs
2019-06-14 12:19:14 -07:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS
Reviewed-by: xuelei, mullan
2019-06-12 18:58:00 -07:00
Anthony Scarpino
94e1d7530f 8211018: Session Resumption without Server-Side State
Reviewed-by: xuelei, jnimeh, jjiang
2019-06-11 16:31:37 -07:00
Xue-Lei Andrew Fan
7aec6727ac 8221253: TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1 bytes
Reviewed-by: jnimeh
2019-05-10 12:33:40 -07:00
John Jiang
04bb71a004 8222391: javax/net/ssl/compatibility/Compatibility.java should be more flexible
Reviewed-by: xuelei
2019-04-23 10:08:52 +08:00
Xue-Lei Andrew Fan
eb59ebb177 8216326: SSLSocket stream close() does not close the associated socket
Reviewed-by: jnimeh
2019-04-16 16:59:09 -07:00
Xue-Lei Andrew Fan
d812742d68 8163326: Update the default enabled cipher suites preference
Reviewed-by: mullan
2019-04-04 14:19:29 -07:00
Xue-Lei Andrew Fan
25f0d60a58 8215430: Remove the internal package com.sun.net.ssl
Reviewed-by: chegar, mullan, wetmore
2019-03-01 08:35:14 -08:00
John Jiang
06befcd14a 8219723: javax/net/ssl/compatibility/Compatibility.java failed on some SNI cases
Re-generates RSA and ECDSA certificates and set longer validity period

Reviewed-by: xuelei
2019-02-28 13:37:03 +08:00
Xue-Lei Andrew Fan
1d7db01371 8219389: Delegated task created by SSLEngine throws BufferUnderflowException
Reviewed-by: ascarpino
2019-02-20 10:20:48 -08:00
Anthony Scarpino
5a97e73e5a 8215790: Delegated task created by SSLEngine throws java.nio.BufferUnderflowException
Reviewed-by: jnimeh
2019-02-12 14:08:07 -08:00
Jesper Wilhelmsson
b2d0be746a Merge 2019-02-02 00:11:54 +01:00
Sean Mullan
f5a411ea53 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883
Reviewed-by: jnimeh, clanger
2019-01-30 15:42:47 -05:00
Sean Mullan
95b848fa61 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883
Reviewed-by: jnimeh, clanger
2019-01-29 10:24:38 -05:00
Jesper Wilhelmsson
5622c425c1 Merge 2019-01-18 23:07:48 +01:00
John Jiang
365de9f2bc 8203687: javax/net/ssl/compatibility/Compatibility.java supports TLS 1.3
Reviewed-by: xuelei
2019-01-18 14:25:34 +08:00
Goetz Lindenmaier
084f0b75bd 8216265: [testbug] Introduce Platform.sharedLibraryPathVariableName() and adapt all tests
Also cleanup some switches over OSes and use File.pathSeparator.

Reviewed-by: dholmes, mdoerr
2019-01-14 00:00:00 +01:00
Xue-Lei Andrew Fan
3933c8477b 8214339: SSLSocketImpl erroneously wraps SocketException
Reviewed-by: ascarpino, jnimeh
2018-12-14 19:39:39 -08:00
Sibabrata Sahoo
bf9fb45c85 8211787: javax/net/ssl/TLSCommon/TLSTest.java throws java.net.SocketTimeoutException: Read timed out
Java.net.SocketTimeoutException: Read timed out

Reviewed-by: xuelei
2018-11-14 23:12:19 -08:00
Xue-Lei Andrew Fan
3e9941ea2b 8212261: Add SSLSession accessors to HttpsURLConnection and SecureCacheResponse
Reviewed-by: mullan, chegar
2018-11-09 08:24:38 -08:00
Sean Mullan
7727e4ca2f 8211883: Disable anon and NULL cipher suites
Reviewed-by: jnimeh
2018-10-25 13:55:28 -04:00
Jamil Nimeh
137e3161c4 8211806: TLS 1.3 handshake server name indication is missing on a session resume
Reviewed-by: xuelei, wetmore
2018-10-19 18:05:50 -07:00
John Jiang
75489d717e 8210632: Add key exchange algorithm to javax/net/ssl/TLSCommon/CipherSuite.java
Javax/net/ssl/TLSCommon/CipherSuite.java supports key exchange algorithms

Reviewed-by: xuelei
2018-10-18 07:56:55 +08:00
John Jiang
4fe2edae59 8211978: Move testlibrary/jdk/testlibrary/SimpleSSLContext.java and testkeys to network testlibrary
Move SimpleSSLContext.java and testkeys to test/lib/jdk/test/lib/net

Reviewed-by: chegar
2018-10-15 22:47:03 +08:00
Jamil Nimeh
fa1ced20b5 8210918: Add test to exercise server-side client hello processing
Reviewed-by: xuelei
2018-09-24 00:13:02 -07:00
Jamil Nimeh
962e755c3a 8140466: ChaCha20 and Poly1305 TLS Cipher Suites
Reviewed-by: xuelei, mullan
2018-09-17 15:25:42 -07:00
John Jiang
1f3d71b620 8209362: sun/security/ssl/SSLSocketImpl/ReuseAddr.java failed due to "BindException: Address already in use (Bind failed)"
Refactor this test with SSLSocketTemplate

Reviewed-by: xuelei
2018-08-31 10:32:47 +08:00
Jesper Wilhelmsson
d40735db17 Merge 2018-08-29 19:48:28 +02:00
Bradford Wetmore
5b511a4a78 8207317: SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy
Reviewed-by: xuelei
2018-08-21 11:30:48 -07:00
Xue-Lei Andrew Fan
66e8f27bd8 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 16:47:56 -07:00
Sibabrata Sahoo
e64ad29e8a 8208496: New Test to verify concurrent behavior of TLS
Verify TLS behavior with multiple threads accessing concurrently.

Reviewed-by: xuelei
2018-08-06 00:46:40 -07:00
Xue-Lei Andrew Fan
611c53c860 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 18:16:47 -07:00
Mikael Vidstedt
83a51d869e Merge 2018-08-09 10:08:07 -07:00
John Jiang
5074bbb767 8206443: Update security libs manual test to cope with removal of javac -source/-target 6
Change compile -source/-target from 1.6 to 1.7

Reviewed-by: xuelei
2018-07-14 07:31:26 +08:00
John Jiang
8452535d49 8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java failed with Connection reset
Refactor this test with SSLSocketTemplate

Reviewed-by: xuelei
2018-07-11 10:39:58 +08:00
Sibabrata Sahoo
99f911cc71 8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
Fixed SSLSessionImpl.getLocalPrincipal() implementation when client side authentication is not enabled.

Reviewed-by: xuelei
2018-07-04 11:49:46 -07:00
John Jiang
4dedba9ebe 8205984: javax/net/ssl/compatibility/Compatibility.java failed to access port log file
Release resource after reading port log file

Reviewed-by: xuelei
2018-07-03 09:27:41 +08:00
Sibabrata Sahoo
7c0ca4d75f 8205111: Develop new Test to verify different key types for supported TLS protocols
TLS test with different key types for supported.

Reviewed-by: xuelei
2018-06-27 02:20:55 -07:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
John Jiang
5463be7a75 8203686: Add JDK 11 major version to javax/net/ssl/compatibility/JdkRelease.java
Javax/net/ssl/compatibility/JdkRelease.java adds major version JDK 11

Reviewed-by: xuelei
2018-05-23 18:18:33 -07:00
Ivan Gerasimov
97c8fdb2dd 8175075: Add 3DES to the default disabled algorithm security property
Reviewed-by: xuelei, mullan, rhalade
2018-01-19 11:24:39 -08:00
Amanda Jiang
5bc3b0759a 8190333: sun/security/ssl/X509KeyManager/PreferredKey.java failed with "Failed to get the preferable key aliases"
Reviewed-by: mullan
2018-04-10 18:16:12 -07:00
Martin Buchholz
1655b15477 8194960: Add a test for trust manager and cacerts keystore sanity
Reviewed-by: weijun
2018-01-11 20:19:50 -08:00
John Jiang
6fc52a47f9 8194257: javax/net/ssl/compatibility/Compatibility.java should be updated for JDK 6 after JDK-8174748
Marks some of AES_256 and AES_128 cipher suites are JDK 6 enabled

Reviewed-by: xuelei
2018-01-09 18:36:31 -08:00
Xue-Lei Andrew Fan
82bf0799c6 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Co-authored-by: Martin Balao <mbalao@redhat.com>
Reviewed-by: jnimeh, ahgross, rhalade, wetmore
2017-12-08 16:41:30 +00:00
John Jiang
f8aaf97179 8186057: TLS interoperability testing between different Java versions
An interop test for checking the compatibility among different Java versions.

Reviewed-by: asmotrak
2017-11-28 22:19:34 -08:00
Weijun Wang
b380f1b6cc 8187786: Many javax/net/ssl/DTLS tests failing
Reviewed-by: xuelei
2017-09-22 09:49:08 +08:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00