150 Commits

Author SHA1 Message Date
John Jiang
66b1b4dc54 8165367: Additional tests for JEP 288: Disable SHA-1 Certificates
The new tests just focus on the usage constraints TLSSever and TLSClient with TLS communication

Reviewed-by: ascarpino
2017-04-04 19:58:24 -07:00
Amy Lu
153f51d64f 8176182: 4 security tests are not run
Reviewed-by: weijun
2017-03-06 13:43:19 +08:00
Sean Coffey
35bad958c1 8173783: IllegalArgumentException: jdk.tls.namedGroups
Reviewed-by: xuelei, wetmore
2017-02-08 08:40:25 +00:00
Sergei Kovalev
12604d71ce 8173763: Two security tests fail with message: "java.security.NoSuchAlgorithmException: EC KeyFactory not available"
Reviewed-by: mullan
2017-02-02 15:53:37 -05:00
Xue-Lei Andrew Fan
e546b078a6 8129988: JSSE should create a single instance of the cacerts KeyStore
Reviewed-by: mullan
2017-01-06 02:03:47 +00:00
Xue-Lei Andrew Fan
cf3815fc2a 8172217: Need debug log for the intermittent failure of AnonCipherWithWantClientAuth
Reviewed-by: weijun
2017-01-04 00:08:40 +00:00
John Jiang
f75520730b 8168935: sun/security/ssl/SSLContextImpl/TrustTrustedCert.java failed Intermittently
TrustTrustedCert.java uses SSLSocketTemplate to avoid timeout failure

Reviewed-by: xuelei
2016-12-20 23:09:27 -08:00
Xue-Lei Andrew Fan
7f4cb73e6d 8170329: New SSLSocket testing template
Reviewed-by: asmotrak, mullan
2016-12-09 17:21:50 +00:00
Sean Mullan
4200b2b0e9 8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property
Reviewed-by: ascarpino
2016-12-02 14:22:19 -05:00
Alan Bateman
30bcdb962c Merge 2016-12-01 11:16:23 +00:00
Alan Bateman
fbe85300bf 8169069: Module system implementation refresh (11/2016)
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Claes Redestad <claes.redestad@oracle.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Reviewed-by: plevart, chegar, psandoz, mchung, alanb, dfuchs, naoto, coffeys, weijun
2016-12-01 08:57:53 +00:00
Artem Smotrakov
3d0c012270 8168969: Merge SSLSocketSample and SSLSocketTemplate
Reviewed-by: xuelei
2016-11-16 12:50:29 -08:00
John Jiang
5e987e28e1 8168064: sun/security/ssl/ServerHandshaker/AnonCipherWithWantClientAuth.java failed with "Received fatal alert: handshake_failure"
It takes advantage of SSLTest.java to fix intermittent SSLHandshakeException failure

Reviewed-by: xuelei, asmotrak
2016-10-26 19:07:05 -07:00
John Jiang
73fbb10440 8165566: sun/security/ssl/SocketCreation/SocketCreation.java fails intermittently: Address already in use
It takes every server to be allocated a free port.

Reviewed-by: chegar
2016-09-20 10:32:52 +08:00
Artem Smotrakov
96a47e15da 8163924: SSLEngineBadBufferArrayAccess.java fails intermittently with Unrecognized SSL message
Reviewed-by: xuelei
2016-09-15 11:07:20 -07:00
Sean Coffey
9807f64dfc 8164846: CertificateException missing cause of underlying exception
Reviewed-by: xuelei
2016-09-01 11:01:47 +01:00
Svetlana Nikandrova
af8dc755fd 8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java failed with "Error while cleaning up threads after test"
Reviewed-by: xuelei
2016-08-29 20:55:06 +03:00
Xue-Lei Andrew Fan
abe8a9eae5 8162362: Introduce system property to control enabled ciphersuites
Reviewed-by: coffeys, mullan
2016-08-13 02:21:30 +00:00
Jamil Nimeh
b6e6759ba9 8132943: ServerHandshaker may select non-empty OCSPStatusRequest structures when Responder ID
Select only OCSPStatusRequest objects that have no responder IDs in them when deciding whether to do OCSP stapling and what form of stapling.

Reviewed-by: xuelei
2016-08-09 22:31:41 -07:00
Rajan Halade
d8acc2fbcf 8129329: sun/security/ssl/SSLContextImpl/MD2InTrustAnchor.java failed intermittently
Reviewed-by: xuelei
2016-04-21 09:55:04 -07:00
Rajan Halade
cfb375b438 8153829: javax/net/ssl/Stapling/HttpsUrlConnClient.java fails intermittently with NullPointerException
Reviewed-by: xuelei, jnimeh
2016-04-12 09:37:46 -07:00
Chris Hegarty
ff2e79c118 Merge 2016-03-22 10:42:32 +00:00
Christoph Langer
872d60701a 8149169: SSLSocketInputRecord.decodeInputRecord buffer overflow
Reviewed-by: xuelei
2016-03-18 13:14:53 +00:00
Alan Bateman
db4d383614 8142968: Module System implementation
Initial integration of JEP 200, JEP 260, JEP 261, and JEP 282

Co-authored-by: Alex Buckley <alex.buckley@oracle.com>
Co-authored-by: Jonathan Gibbons <jonathan.gibbons@oracle.com>
Co-authored-by: Karen Kinnear <karen.kinnear@oracle.com>
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Chris Hegarty <chris.hegarty@oracle.com>
Co-authored-by: Alexandr Scherbatiy <alexandr.scherbatiy@oracle.com>
Co-authored-by: Amy Lu <amy.lu@oracle.com>
Co-authored-by: Calvin Cheung <calvin.cheung@oracle.com>
Co-authored-by: Daniel Fuchs <daniel.fuchs@oracle.com>
Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com>
Co-authored-by: Harold Seigel <harold.seigel@oracle.com>
Co-authored-by: Jaroslav Bachorik <jaroslav.bachorik@oracle.com>
Co-authored-by: Jean-Francois Denise <jean-francois.denise@oracle.com>
Co-authored-by: Jan Lahoda <jan.lahoda@oracle.com>
Co-authored-by: James Laskey <james.laskey@oracle.com>
Co-authored-by: Lois Foltan <lois.foltan@oracle.com>
Co-authored-by: Miroslav Kos <miroslav.kos@oracle.com>
Co-authored-by: Huaming Li <huaming.li@oracle.com>
Co-authored-by: Sean Mullan <sean.mullan@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Masayoshi Okutsu <masayoshi.okutsu@oracle.com>
Co-authored-by: Peter Levart <peter.levart@gmail.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Claes Redestad <claes.redestad@oracle.com>
Co-authored-by: Sergey Bylokhov <sergey.bylokhov@oracle.com>
Co-authored-by: Alexandre Iline <alexandre.iline@oracle.com>
Co-authored-by: Volker Simonis <volker.simonis@gmail.com>
Co-authored-by: Staffan Larsen <staffan.larsen@oracle.com>
Co-authored-by: Stuart Marks <stuart.marks@oracle.com>
Co-authored-by: Semyon Sadetsky <semyon.sadetsky@oracle.com>
Co-authored-by: Serguei Spitsyn <serguei.spitsyn@oracle.com>
Co-authored-by: Sundararajan Athijegannathan <sundararajan.athijegannathan@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Vincent Ryan <vincent.x.ryan@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Co-authored-by: Yuri Nesterenko <yuri.nesterenko@oracle.com>
Co-authored-by: Yekaterina Kantserova <yekaterina.kantserova@oracle.com>
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Felix Yang <felix.yang@oracle.com>
Co-authored-by: Andrei Eremeev <andrei.eremeev@oracle.com>
Co-authored-by: Frank Yuan <frank.yuan@oracle.com>
Co-authored-by: Sergei Pikalev <sergei.pikalev@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Tiantian Du <tiantian.du@oracle.com>
Co-authored-by: Sha Jiang <sha.jiang@oracle.com>
Reviewed-by: alanb, mchung, naoto, rriggs, psandoz, plevart, mullan, ascarpino, vinnie, prr, sherman, dfuchs, mhaupt
2016-03-17 19:04:16 +00:00
Xue-Lei Andrew Fan
3c244740c6 8148108: Disable Diffie-Hellman keys less than 1024 bits
Reviewed-by: vinnie, mullan
2016-03-04 14:04:01 +00:00
Alan Bateman
3573d65040 8148147: Sync up @modules from jigsaw/jake
Reviewed-by: chegar, mchung
2016-01-25 19:01:19 +00:00
Xue-Lei Andrew Fan
2f861a9225 8144773: Further reduce use of MD5
Reviewed-by: mullan, wetmore, jnimeh, ahgross
2015-12-15 12:59:00 +00:00
Vinnie Ryan
a63d39ad89 8144093: JEP 244/8051498 - TLS Application-Layer Protocol Negotiation Extension
Reviewed-by: wetmore, xuelei, mullan, coffeys
2015-12-02 03:37:29 +00:00
Xue-Lei Andrew Fan
a9da78ecd7 8081760: Better group dynamics
Allows user to specify custom DH groups. Also reviewed by Alexander Fomin <alexander.fomin@oracle.com>.

Reviewed-by: coffeys, mullan, weijun, jnimeh, ahgross, asmotrak
2015-07-20 01:45:23 +00:00
Martin Buchholz
24742f7b1d 8134984: Text files should end in exactly one newline
Automated fixup of newlines at end-of-file via the usual perl one-liner

Reviewed-by: chegar, sherman
2015-09-02 14:11:50 -07:00
Jamil Nimeh
e7f31340a0 8046321: OCSP Stapling for TLS
Initial feature commit for OCSP stapling in JSSE

Reviewed-by: xuelei, mullan
2015-08-05 12:19:38 -07:00
Xue-Lei Andrew Fan
b7bf7fd3fd 8076328: Enforce key exchange constraints
Reviewed-by: wetmore, igerasim, ahgross, asmotrak
2015-04-22 05:09:54 +00:00
Xue-Lei Andrew Fan
0f1698f906 8043758: Datagram Transport Layer Security (DTLS)
Reviewed-by: jnimeh, weijun, mullan, wetmore
2015-06-02 04:01:04 +00:00
Ivan Gerasimov
97f5b473ec 8081027: Create a common test to check adequacy of initial size of static HashMap/ArrayList fields
Reviewed-by: martin
2015-05-29 19:20:22 +03:00
Mandy Chung
53a97cbeb3 8081347: Add @modules to jdk_core tests
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Alan Bateman <alan.bateman@oracle.com>
Reviewed-by: alanb, joehw, lancea
2015-05-28 10:54:48 -07:00
Artem Smotrakov
6b7bbd4884 8050374: More Signature tests
Reviewed-by: valeriep
2015-05-25 11:47:41 +03:00
Joe Darcy
86c109e149 8078334: Mark regression tests using randomness
Reviewed-by: xuelei, alanb
2015-04-29 10:25:53 -07:00
Artem Smotrakov
dc99c45870 8076221: Disable RC4 cipher suites
Reviewed-by: xuelei, wetmore
2015-04-15 07:34:24 +00:00
Jamil Nimeh
3d738985d7 8044860: Vectors and fixed length fields should be verified for allowed sizes
Reviewed-by: xuelei
2015-01-22 20:19:42 -08:00
Xue-Lei Andrew Fan
83143ef7f8 8061210: Issues in TLS
Reviewed-by: jnimeh, mullan, wetmore, ahgross, asmotrak
2014-11-03 08:30:18 +00:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual
Reviewed-by: xuelei, wetmore
2014-03-18 15:04:59 -07:00
Xue-Lei Andrew Fan
451daea8f4 8037346: Need to terminate server process if client runs into problems
Reviewed-by: weijun
2014-03-17 10:07:13 +00:00
Xue-Lei Andrew Fan
521f9a2048 8032473: Restructure JSSE regression test hierarchy in jdk test
Reviewed-by: weijun
2014-03-05 07:24:34 +00:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Vladimir Kozlov
9c83896027 Merge 2014-01-22 14:17:32 -08:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
2014-01-17 21:54:30 +01:00
Xue-Lei Andrew Fan
ca25819893 8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
Reviewed-by: mullan
2014-01-14 06:41:10 -08:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property
Reviewed-by: mullan, weijun
2014-01-13 21:12:58 -08:00
Xue-Lei Andrew Fan
15c7afef94 8028518: Increase the priorities of GCM cipher suites
Reviewed-by: wetmore
2014-01-13 20:56:18 -08:00