91 Commits

Author SHA1 Message Date
Sergey Bylokhov
7fff22afe7 8272805: Avoid looking up standard charsets
Reviewed-by: weijun, naoto, dfuchs, azvegint, erikj
2021-09-02 22:56:20 +00:00
Weijun Wang
9569159d25 8272674: Logging missing keytab file in Krb5LoginModule
Reviewed-by: coffeys
2021-08-19 19:02:22 +00:00
Martin Balao
67869b491a 8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup
Reviewed-by: weijun
2021-08-10 16:28:10 +00:00
Weijun Wang
40d23a0c0b 8267543: Post JEP 411 refactoring: security
Reviewed-by: mullan
2021-06-02 15:47:57 +00:00
Weijun Wang
6765f90250 8266459: Implement JEP 411: Deprecate the Security Manager for Removal
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: erikj, darcy, chegar, naoto, joehw, alanb, mchung, kcr, prr, lancea
2021-06-02 11:57:31 +00:00
Weijun Wang
838a007103 8267584: The java.security.krb5.realm system property only needs to be defined once
Reviewed-by: mullan
2021-05-24 15:45:01 +00:00
Alex Blewitt
ebbce91e79 8264681: Use the blessed modifier order in java.security
Reviewed-by: mullan, shade
2021-04-14 06:01:00 +00:00
Weijun Wang
eb5c097b6d 8262389: Use permitted_enctypes if default_tkt_enctypes or default_tgs_enctypes is not present
Reviewed-by: mullan
2021-04-06 23:58:21 +00:00
Anton Kozlov
dbc9e4b50c 8253795: Implementation of JEP 391: macOS/AArch64 Port
8253816: Support macOS W^X
8253817: Support macOS Aarch64 ABI in Interpreter
8253818: Support macOS Aarch64 ABI for compiled wrappers
8253819: Implement os/cpu for macOS/AArch64
8253839: Update tests and JDK code for macOS/Aarch64
8254941: Implement Serviceability Agent for macOS/AArch64
8255776: Change build system for macOS/AArch64
8262903: [macos_aarch64] Thread::current() called on detached thread

Co-authored-by: Vladimir Kempik <vkempik@openjdk.org>
Co-authored-by: Bernhard Urban-Forster <burban@openjdk.org>
Co-authored-by: Ludovic Henry <luhenry@openjdk.org>
Co-authored-by: Monica Beckwith <mbeckwit@openjdk.org>
Reviewed-by: erikj, ihse, prr, cjplummer, stefank, gziemski, aph, mbeckwit, luhenry
2021-03-25 18:10:18 +00:00
Aleksey Shipilev
0638303316 8263497: Clean up sun.security.krb5.PrincipalName::toByteArray
Reviewed-by: weijun
2021-03-15 06:27:32 +00:00
Bradford Wetmore
32cbd193d9 8263105: security-libs doclint cleanup
Reviewed-by: iris, darcy, dfuchs, mullan
2021-03-11 00:26:26 +00:00
Weijun Wang
ded96ddcde 8139348: Deprecate 3DES and RC4 in Kerberos
Reviewed-by: mullan
2021-02-25 18:49:05 +00:00
Weijun Wang
991f7c1303 8210373: Deadlock in libj2gss.so when loading "j2gss" and "net" libraries in parallel.
Reviewed-by: xuelei
2021-02-23 00:59:58 +00:00
Weijun Wang
59b8d595d2 8261481: Cannot read Kerberos settings in dynamic store on macOS Big Sur
Reviewed-by: mullan
2021-02-12 14:57:01 +00:00
Weijun Wang
4a8b5c1602 8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m

Reviewed-by: erikj, prr, ihse, valeriep
2021-02-03 16:20:16 +00:00
Jamil Nimeh
8554fe6ebc 8253866: Security Libs Terminology Refresh
Reviewed-by: erikj, weijun, mullan
2021-01-14 16:36:51 +00:00
Weijun Wang
9e463d1a88 8258631: Remove sun.security.jgss.krb5.Krb5Util.getSubject()
Reviewed-by: xuelei
2020-12-22 16:41:19 +00:00
Weijun Wang
e5ba020ee9 8253829: Wrong length compared in SSPI bridge
Reviewed-by: valeriep
2020-09-30 17:13:47 +00:00
Alexey Bakhtin
cfa3f74931 8245527: LDAP Channel Binding support for Java GSS/Kerberos
Reviewed-by: dfuchs, aefimov, mullan
2020-09-25 07:26:54 +00:00
Martin Balao
31753ef9bf 8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
Reviewed-by: weijun
2020-07-25 01:02:51 -03:00
Joe Darcy
5db58348f8 8250246: Address reliance on default constructors in security libs
Reviewed-by: mullan
2020-07-24 13:49:38 -07:00
Mandy Chung
71d646a160 8235521: Replacement API for Unsafe::ensureClassInitialized
Reviewed-by: alanb, chegar, psandoz
2020-06-08 16:55:45 -07:00
Weijun Wang
f833afa660 8246640: @systemproperty should be @systemProperty in java.security.jgss
Reviewed-by: xuelei
2020-06-05 17:55:57 +08:00
Weijun Wang
6212aea580 8246193: Possible NPE in ENC-PA-REP search in AS-REQ
Reviewed-by: xuelei
2020-05-31 10:13:04 +08:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Martin Balao
2883bccf48 8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
Reviewed-by: weijun
2020-03-28 19:41:10 -03:00
Henry Jen
0278846eaa Merge 2020-04-14 23:11:49 +00:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)
Reviewed-by: weijun
2020-04-01 18:38:05 -07:00
Weijun Wang
aa3638a32d 8231508: Spec Clarification : KeyTab:exist() method does not specify about the fallback details
Reviewed-by: mullan
2020-02-11 11:17:37 +08:00
Patrick Zhang
03721247d8 8238388: libj2gss/NativeFunc.o "multiple definition" link errors with GCC10
Fixed libj2gss link errors caused by GCC10 default -fno-common

Reviewed-by: weijun
2020-02-05 20:31:09 +08:00
Mikael Vidstedt
3318314c7c 8237589: Fix copyright header formatting
Reviewed-by: jjg, serb, iris, jwilhelm
2020-01-21 14:23:01 -08:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00
Weijun Wang
f4af0eadb6 8236405: Formatting issues in Kerberos debug output
Reviewed-by: mullan
2019-12-21 15:27:37 +08:00
Weijun Wang
f3815c85a1 8231139: Improved keystore support
Reviewed-by: mullan, ahgross
2019-10-09 17:42:38 +08:00
Weijun Wang
7c32a6aeae 8231134: Improved credential support
Reviewed-by: ahgross, valeriep
2019-09-26 18:13:20 +08:00
Weijun Wang
bda0fba56b 8229951: Better Ticket Granting Services
Reviewed-by: ahgross, valeriep
2019-09-26 18:12:53 +08:00
Martin Balao
4fa827ec92 8005819: Support cross-realm MSSFU
Reviewed-by: weijun
2019-12-11 15:43:42 -03:00
Weijun Wang
36bd09dead 8233222: Clarify system property usage in KerberosPrincipal instantiation
Reviewed-by: mullan
2019-12-07 09:40:28 +08:00
Martin Doerr
b1e086a5fc 8220348: [ntintel] asserts about copying unaligned array
Reviewed-by: clanger, stuefe
2019-12-06 14:31:05 +01:00
Weijun Wang
ab280fcac4 8234267: DelegationPermission implementation doesn't completely follow the updated specification
Reviewed-by: xuelei
2019-12-05 10:36:46 +08:00
Martin Balao
171257ea1a 8233946: Add @since 13 annotation to KerberosPrincipal.KRB_NT_ENTERPRISE field
Reviewed-by: clanger
2019-11-12 12:36:16 -03:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
2019-11-12 01:36:17 -08:00
Weijun Wang
026a05d0c6 8231365: ServicePermission::equals doesn't comply to the spec
8231196: DelegationPermission allows to create an instance that thows NPE on ::equals call

Reviewed-by: mullan
2019-10-29 09:34:23 +08:00
Henry Jen
8d141f1048 Merge 2019-10-14 21:01:25 +00:00
Joe Darcy
8fe60f46d7 8231368: Suppress warnings on non-serializable non-transient instance fields in java.security.jgss
Reviewed-by: mullan, coffeys
2019-10-08 15:27:13 -07:00
Weijun Wang
12c278c3e3 8228659: Record which Java methods are called by native codes in JGSS and JAAS
Reviewed-by: mullan
2019-09-25 17:54:21 +08:00
Thomas Stuefe
dcbc28790d 8230910: libsspi_bridge does not build on Windows 32bit
Reviewed-by: alanb, weijun
2019-09-15 08:41:48 +02:00
Ivan Gerasimov
5c25e2a6fb 8211360: Change #if DEF to #if defined(DEF)
Reviewed-by: bpb, vtewari
2019-08-21 13:49:16 -07:00
Martin Balao
3cd50f2666 8227437: S4U2proxy cannot continue because server's TGT cannot be found
Reviewed-by: weijun
2019-07-17 12:26:56 -03:00