stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
37,792 Commits 2 Branches 0 Tags 1.2 GiB
6b75dd6668
Commit Graph

676 Commits

Author SHA1 Message Date
Jamil Nimeh
3d738985d7 8044860: Vectors and fixed length fields should be verified for allowed sizes 
Reviewed-by: xuelei
 2015-01-22 20:19:42 -08:00
Vinnie Ryan
d80497254d 8069155: The value of 'KeyStore Type' isn't 'jks' 
Reviewed-by: xuelei
 2015-01-22 12:33:05 +00:00
Xue-Lei Andrew Fan
83143ef7f8 8061210: Issues in TLS 
Reviewed-by: jnimeh, mullan, wetmore, ahgross, asmotrak
 2014-11-03 08:30:18 +00:00
Peter Levart
4029366de9 8047769: SecureRandom should be more frugal with file descriptors 
Introduce FileInputStreamPool to cache open FileInputStreams

Reviewed-by: wetmore, alanb, chegar
 2015-01-21 12:49:53 +01:00
Jason Uh
3793acecce 8059916: Change default criticality of policy mappings and policy constraints certificate extensions 
Reviewed-by: mullan
 2015-01-13 14:33:54 -08:00
Artem Smotrakov
e268dee361 8048603: Additional tests for MAC algorithms 
Reviewed-by: valeriep
 2015-01-13 14:26:34 +03:00
Valerie Peng
ac09164efa 8039921: SHA1WithDSA with key > 1024 bits not working 
Removed the key size limits for all SHAXXXWithDSA signatures

Reviewed-by: weijun
 2014-12-30 22:03:23 +00:00
Vinnie Ryan
befd7d1c25 8044445: JEP 229: Create PKCS12 Keystores by Default 
Reviewed-by: mullan, weijun
 2014-12-23 16:30:57 +00:00
Valerie Peng
86291780cb 8062170: java.security.ProviderException: Error parsing configuration with space 
Updated to parse library path as a line which can contain quoted strings.

Reviewed-by: vinnie
 2014-12-12 00:23:32 +00:00
Weijun Wang
26099e744a 8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes 
Reviewed-by: valeriep
 2014-12-09 18:28:26 +08:00
David Kocher
15d4deb44a 8046777: apple.security.KeychainStore has a problem searching for identities 
Reviewed-by: mullan
 2014-11-11 20:11:34 +00:00
Anthony Scarpino
1924ac8a18 8063700: -Xcheck:jni changes cause many JCK failures in api/javax_crypto tests in SunPKCS11 
Reviewed-by: mullan, valeriep
 2014-11-07 13:07:09 -08:00
Weijun Wang
ed9e73bb66 8057810: New defaults for DSA keys in jarsigner and keytool 
Reviewed-by: vinnie
 2014-11-05 17:15:09 +08:00
Florian Bruckner
9299e8a8a6 8062264: KeychainStore requires non-null password to be supplied when retrieving a private key 
Reviewed-by: mullan
 2014-10-29 11:53:37 +00:00
Mandy Chung
a76f56165c 8043277: Update jdk regression tests to extend the default security policy instead of override 
Reviewed-by: alanb, mullan, chegar, sla
 2014-10-27 13:45:39 -07:00
Weijun Wang
cd3c6765c2 8044215: Unable to initiate SpNego using a S4U2Proxy GSSCredential (Krb5ProxyCredential) 
Reviewed-by: mullan
 2014-10-14 10:08:32 +08:00
Weijun Wang
5468e30603 8029659: Keytool, print key algorithm of certificate or key entry 
Reviewed-by: xuelei
 2014-10-14 10:07:44 +08:00
Weijun Wang
76b1f8c99c 8060007: Keytool test can use bundled NSS lib on Mac 
Reviewed-by: vinnie
 2014-10-09 16:05:24 +08:00
Vinnie Ryan
3215ed2f0a 8059627: Enable PKCS11 tests on Mac 
Reviewed-by: mullan
 2014-10-06 16:44:57 +01:00
Vinnie Ryan
a8d4acac11 8041740: Test sun/security/tools/keytool/ListKeychainStore.sh fails on Mac 
Reviewed-by: mullan
 2014-10-05 14:24:44 +01:00
Weijun Wang
4a99ec3dce 8059313: Enable keytool NSS test on Mac 
Reviewed-by: vinnie
 2014-09-28 10:42:50 +08:00
Weijun Wang
f18f44bce3 8042900: Allow com.sun.security.jgss to be in different module than org.ietf.jgss 
Reviewed-by: valeriep, alanb
 2014-09-17 13:55:12 +08:00
Ivan Gerasimov
13da43d0d4 8055731: sun/security/smartcardio/TestDirect.java throws java.lang.IndexOutOfBoundsException 
Reviewed-by: valeriep
 2014-08-23 01:05:50 +04:00
Weijun Wang
391a556d14 8054817: File ccache only recognizes Linux and Solaris defaults 
Reviewed-by: mullan
 2014-08-19 14:30:12 +08:00
Ivan Gerasimov
e3b86ec908 8046343: (smartcardio) CardTerminal.connect('direct') does not work on MacOSX 
Reviewed-by: mullan, valeriep
 2014-08-07 15:32:23 +04:00
Vinnie Ryan
b572fc9aad 8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently 
Reviewed-by: mullan
 2014-08-05 13:59:15 +01:00
Weijun Wang
d99124eadb 8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred 
Reviewed-by: mullan
 2014-07-21 22:10:37 +08:00
Weijun Wang
0f6c52abb1 8049834: Two security tools tests do not run with only JRE 
Reviewed-by: mullan
 2014-07-21 22:09:38 +08:00
Weijun Wang
bfa19ebfbc 8043071: Expose session key and KRB_CRED through extended GSS-API 
Reviewed-by: mullan
 2014-07-19 10:20:42 +08:00
Ivan Gerasimov
80448466d4 8050893: (smartcardio) Invert reset argument in tests in sun/security/smartcardio 
Reviewed-by: valeriep
 2014-07-18 17:04:10 +04:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible 
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
 2014-07-10 22:44:58 +00:00
Weijun Wang
57d0562d7c 8044085: Access ExtendedGSSContext.inquireSecContext() result through SASL 
Reviewed-by: mullan
 2014-07-10 10:44:48 +08:00
Weijun Wang
ea1882be4f 8048073: Cannot read ccache entry with a realm-less service name 
Reviewed-by: xuelei
 2014-06-25 18:49:02 +08:00
Weijun Wang
cc269950df 8029994: Support "include" and "includedir" in krb5.conf 
Reviewed-by: mullan
 2014-06-20 10:27:10 +08:00
Vinnie Ryan
7d5e52ba49 8047085: PKCS11/NSS tests failing intermittently on Windows 
Reviewed-by: mullan
 2014-06-18 15:05:29 +01:00
Weijun Wang
a22c2ed67f 8046702: default_options.sh test failure on Solaris 
Reviewed-by: xuelei
 2014-06-13 08:25:50 +08:00
Weijun Wang
53c7b2ac2b 8023197: Pre-configured command line options for keytool and jarsigner 
Reviewed-by: xuelei
 2014-06-11 18:27:10 +08:00
Anthony Scarpino
b757b4461e 8039212: SecretKeyBasic.sh needs to avoid NSS libnss3 and libsoftokn3 version mismatches 
Reviewed-by: vinnie
 2014-06-10 12:04:42 -07:00
Weijun Wang
704a20b250 8044747: [TESTBUG] Test sun/security/tools/policytool/i18n.sh fails after clicking 'Done' button in test frame 
Reviewed-by: xuelei
 2014-06-06 22:31:53 +08:00
Weijun Wang
47e4638160 8044755: Add a test for algorithm constraints check in jarsigner 
Reviewed-by: xuelei
 2014-06-05 15:27:51 +08:00
Weijun Wang
a57ab24f53 8036779: sun.security.krb5.KdcComm interprets kdc_timeout as msec instead of sec 
Reviewed-by: xuelei
 2014-05-30 14:37:43 +08:00
Vinnie Ryan
1eef4367df 8044038: Security tests fail on 32 bit linux platform 
Reviewed-by: xuelei, weijun
 2014-05-29 15:50:36 +01:00
Weijun Wang
1b1639105a 8036709: Java 7 jarsigner displays warning about cert policy tree 
Reviewed-by: mullan
 2014-05-29 10:36:06 +08:00
Weijun Wang
53cb60f148 8043537: Changes for JDK-8039951 introduced circular dependency between Kerberos and com.sun.security.auth 
Reviewed-by: alanb
 2014-05-22 07:04:57 +08:00
Jamil Nimeh
4e99062caa 6996377: shrink duplicate code in the constructor of PKIXValidator 
Reviewed-by: mullan, xuelei
 2014-05-12 12:35:23 -04:00
Weijun Wang
79cdf6ad7f 8039951: com.sun.security.auth.module missing classes on some platforms 
Reviewed-by: mullan
 2014-05-08 22:30:31 +08:00
Weijun Wang
93378ad4b9 8040321: keytool and jarsigner tests doesn't pass though VM tools to tools 
Reviewed-by: alanb
 2014-04-25 10:57:09 +08:00
Alexandre Iline
e613bf3290 8039816: Some tests depend on internal API sun.security.action.GetPropertyAction 
Replace sun.security.action.GetPropertyAction usages with lambda expressions creating java.security.PrivilegedAction.

Reviewed-by: alanb, mchung, chegar
 2014-04-21 13:16:32 -07:00
Alexandre Iline
092e29980a 8039438: Some tests depend on internal API sun.misc.IOUtils 
Remove dependency on sun.misc.IOUtils.readFully(InputStream, int, boolean)

Reviewed-by: alanb, mchung, chegar
 2014-04-21 13:12:22 -07:00
Weijun Wang
b49a1407bc 8038837: Add support to jarsigner for specifying timestamp hash algorithm 
Reviewed-by: vinnie
 2014-04-21 10:26:03 +08:00
Xue-Lei Andrew Fan
2f501cd8a5 8028192: Use of PKCS11-NSS provider in FIPS mode broken 
Reviewed-by: ahgross, ascarpino, asmotrak
 2014-04-09 12:49:51 +00:00
Weijun Wang
3344a6c353 8039132: cleanup @ignore JAAS/krb5 tests 
Reviewed-by: xuelei
 2014-04-09 17:08:37 +08:00
Weijun Wang
9bae1e597b 8029995: accept yes/no for boolean krb5.conf settings 
Reviewed-by: mullan
 2014-04-04 21:19:43 +08:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual 
Reviewed-by: xuelei, wetmore
 2014-03-18 15:04:59 -07:00
Xue-Lei Andrew Fan
451daea8f4 8037346: Need to terminate server process if client runs into problems 
Reviewed-by: weijun
 2014-03-17 10:07:13 +00:00
Jason Uh
323843f397 8021804: Certpath validation fails if validity period of root cert does not include validity period of intermediate cert 
Reviewed-by: mullan
 2014-03-12 08:55:35 -07:00
Weijun Wang
e83e738c09 8035963: The failed Kerberos tests due to timeouts 
Reviewed-by: alanb, xuelei
 2014-03-12 14:18:01 +08:00
Weijun Wang
fd6995ab56 8036971: krb5.conf does not accept directive lines before the first section 
Reviewed-by: xuelei
 2014-03-11 07:56:49 +08:00
Jason Uh
d6207a4ca5 8036844: test failures due to wrong keystore paths 
Reviewed-by: weijun
 2014-03-07 10:40:03 -08:00
Xue-Lei Andrew Fan
521f9a2048 8032473: Restructure JSSE regression test hierarchy in jdk test 
Reviewed-by: weijun
 2014-03-05 07:24:34 +00:00
Weijun Wang
0903468259 8036104: Rename the PAData.java test 
Reviewed-by: xuelei
 2014-03-03 10:55:31 +08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013 
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
 2013-12-26 12:04:16 -08:00
Michael Cui
dca4d10631 8028711: TEST_BUG: Shell tests should pass through VM options 
Reviewed-by: alanb
 2014-02-13 15:59:04 +00:00
Weijun Wang
2b7c6c0d41 8034762: Move krb5.conf related tests into a single place 
Reviewed-by: xuelei
 2014-02-12 19:20:43 +08:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Weijun Wang
49fdbfba20 8031572: jarsigner -verify exits with 0 when a jar file is not properly signed 
Reviewed-by: mullan
 2014-01-25 18:16:33 +08:00
Vladimir Kozlov
9c83896027 Merge 2014-01-22 14:17:32 -08:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX 
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
 2014-01-17 21:54:30 +01:00
Abhijit Saha
a9a038efa7 Merge 2014-01-15 10:09:00 -08:00
Xue-Lei Andrew Fan
ca25819893 8031566: regression test failure, SSLEngineBadBufferArrayAccess.java 
Reviewed-by: mullan
 2014-01-14 06:41:10 -08:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property 
Reviewed-by: mullan, weijun
 2014-01-13 21:12:58 -08:00
Xue-Lei Andrew Fan
15c7afef94 8028518: Increase the priorities of GCM cipher suites 
Reviewed-by: wetmore
 2014-01-13 20:56:18 -08:00
Chris Hegarty
be247dff24 Merge 2014-01-10 15:04:46 +00:00
Weijun Wang
74e666c00e 8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt 
Reviewed-by: xuelei
 2013-12-30 11:51:19 +08:00
Xue-Lei Andrew Fan
3b4a745b26 8025415: Test SSLSocketImplThrowsWrongExceptions.java timed out 
Reviewed-by: weijun
 2013-12-24 20:07:12 -08:00
Xue-Lei Andrew Fan
a46e0545ea 8030842: Intermittent test failure SSLSocketTimeoutNulls.java 
Reviewed-by: weijun
 2013-12-19 22:59:21 -08:00
Xue-Lei Andrew Fan
ffe3f52e17 7093640: Enable client-side TLS 1.2 by default 
Reviewed-by: weijun, mullan, wetmore
 2013-12-19 02:27:25 -08:00
Alan Bateman
76a5534d5b 8029904: Remove com.sun.security.auth.callback.DialogCallbackHandler 
Reviewed-by: mullan
 2013-12-16 15:05:26 +00:00
Zaiyao Liu
7c18844372 8028562: Test SSLSocketSSLEngineTemplate.java intermittent failed with "Data length error" 
Test stabilization, read one more time in case of message fragment

Reviewed-by: mullan, xuelei
 2013-12-15 20:24:45 -08:00
Anthony Scarpino
3c1c57bbbd 8027218: TEST_BUG: sun/security/pkcs11/ec tests fail because of ever-changing key size restrictions 
Reviewed-by: vinnie
 2013-12-04 10:59:17 -08:00
Valerie Peng
0e30b48211 Merge 2013-12-03 17:25:28 -08:00
Valerie Peng
ad74259a34 8029158: sun/security/pkcs11/Signature/TestDSAKeyLength.java does not compile (or run) 
Add the missing library path and skip testing against NSS 1.14 or later due to known NSS issue

Reviewed-by: vinnie, ascarpino
 2013-12-03 17:23:58 -08:00
Weijun Wang
7ddfe32e7b 8028351: JWS doesn't get authenticated when using kerberos auth proxy 
Reviewed-by: xuelei
 2013-12-04 09:14:42 +08:00
Vinnie Ryan
9dae7f5c55 8029369: Shell tests in sun/security/pkcs11/ do not compile PKCS11Test 
Reviewed-by: mullan
 2013-12-02 14:19:25 +00:00
Rajan Halade
dec69128e0 8021418: Intermittent: SSLSocketSSLEngineTemplate.java test fails with timeout 
Reviewed-by: xuelei, wetmore
 2013-11-27 15:25:36 -08:00
Weijun Wang
d4a597432b 8029181: ts.sh generates invalid file after JDK-8027026 
Reviewed-by: vinnie, mullan
 2013-11-27 09:56:38 +08:00
Valerie Peng
5e6a93fc20 7200306: SunPKCS11 provider delays the check of DSA key size for SHA1withDSA to sign() instead of init() 
Add key length checks to P11Signature class

Reviewed-by: mullan
 2013-11-25 11:56:53 -08:00
Lana Steuck
33cd414e58 Merge 2013-11-25 09:40:25 -08:00
Lana Steuck
1a633e63a9 Merge 2013-11-15 07:14:23 -08:00
Vinnie Ryan
242d5a95bd 8028377: test/sun/security/provider/KeyStore/DKSTest.sh attempts to write to ${test.src} 
Reviewed-by: alanb, weijun
 2013-11-19 15:39:58 +00:00
Weijun Wang
ab91495c0e 8028479: runNameEquals still cannot precisely detect if a usable native krb5 is available 
Reviewed-by: xuelei
 2013-11-19 14:14:14 +08:00
Rajan Halade
7ba208e79f 8014266: regression test AsyncSSLSocketClose.java time out 
Reviewed-by: xuelei
 2013-11-14 16:08:28 -08:00
Xue-Lei Andrew Fan
cc6f28352f 8023147: Test DisabledShortRSAKeys.java intermittent failed 
Reviewed-by: mullan
 2013-11-13 01:14:23 -08:00
Sergey Bylokhov
9ab430a0d2 8027696: Incorrect copyright header in the tests 
Reviewed-by: alanb, malenkov, mullan
 2013-11-12 20:24:25 +04:00
Weijun Wang
4780d5d560 8027991: InputStream should be closed in sun.security.tools.jarsigner.Main 
Reviewed-by: xuelei
 2013-11-11 16:54:41 +08:00
Abhijit Saha
15d051e851 Merge 2013-12-07 16:15:08 -08:00
Chris Hegarty
388f28f83b Merge 2013-10-21 15:00:56 +01:00
Leif Samuelsson
a25177c60e 7025699: Policy Tool is not accessible by keyboard 
Reviewed-by: alexp, weijun
 2013-10-18 08:57:52 +08:00
Jason Uh
9419bb4f59 8026233: test/sun/security/tools/keytool/StorePasswords.java needs to clean up files 
Reviewed-by: vinnie
 2013-10-17 12:00:20 -07:00
Weijun Wang
286d559a2f 8026712: TEST_BUG: update sun/security/tools/keytool/autotest.sh with a new location to find of libsoftokn3.so 
Reviewed-by: vinnie
 2013-10-17 20:56:07 +08:00
Weijun Wang
9132d85a65 8027026: Change keytool -genkeypair to use -keyalg RSA 
Reviewed-by: alanb, chegar, mullan
 2013-10-23 08:32:03 +08:00
Xue-Lei Andrew Fan
ec67e938e2 8026119: Regression test DHEKeySizing.java failing intermittently 
Reviewed-by: weijun
 2013-10-13 21:10:33 -07:00
Lana Steuck
5db317fd23 Merge 2013-10-10 13:33:02 -07:00
Weijun Wang
8f5279cf87 8026235: keytool NSS test should use 64 bit lib on Solaris 
Reviewed-by: vinnie
 2013-10-10 15:24:41 +08:00
Valerie Peng
4ff4823dfc Merge 2013-10-09 13:07:58 -07:00
Artem Smotrakov
36b94773c9 8026037: [TESTBUG] sun/security/tools/jarsigner/warnings.sh test fails on Solaris 
Reviewed-by: chegar
 2013-10-09 18:58:16 +08:00
Valerie Peng
2f4af22f17 7196382: PKCS11 provider should support 2048-bit DH 
Query and enforce range checking using the values from native PKCS11 library.

Reviewed-by: xuelei
 2013-10-08 11:07:31 -07:00
Xue-Lei Andrew Fan
1d8fbe7d05 6956398: make ephemeral DH key match the length of the certificate key 
Reviewed-by: weijun
 2013-10-07 18:46:28 -07:00
Chris Hegarty
6c1acc1638 Merge 2013-10-04 14:51:17 +01:00
David Katleman
b4c28b3b28 Merge 2013-10-01 12:45:47 -07:00
Kumar Srinivasan
a210a6a74e 8020552: [launcher] changes to support removal of Solaris 32-bit distribution 
8023495: [infra] create 64-bit solaris bits with symlinks

Reviewed-by: ihse, tbell, dholmes, darcy, alanb, erikj, sla, martin
 2013-09-27 16:29:44 -07:00
Vinnie Ryan
f36ff9e467 8008171: Refactor KeyStore.DomainLoadStoreParameter as a standalone class 
Reviewed-by: mullan, weijun
 2013-10-09 10:48:44 +01:00
Weijun Wang
cccb39a270 8024302: Clarify jar verifications 
8023338: Update jarsigner to encourage timestamping

Reviewed-by: mullan, ahgross
 2013-09-19 10:40:16 +08:00
Xue-Lei Andrew Fan
d5c45c6cde 8024444: Change to use othervm mode of tests in SSLEngineImpl 
Reviewed-by: mullan
 2013-09-09 19:07:05 -07:00
Weijun Wang
a4c7971bdb 8024046: Test sun/security/krb5/runNameEquals.sh failed on 7u45 Embedded linux-ppc* 
Reviewed-by: xuelei
 2013-09-09 11:08:20 +08:00
Xue-Lei Andrew Fan
8b9c8247a8 7188657: There should be a way to reorder the JSSE ciphers 
Reviewed-by: weijun, wetmore
 2013-09-07 17:05:22 -07:00
Vinnie Ryan
cbe29b7b72 8008296: keytool utility doesn't support '-importpassword' command 
Reviewed-by: weijun
 2013-10-04 16:05:55 +01:00
Weijun Wang
5ae304e238 8012615: Realm.getRealmsList returns realms list in wrong 
Reviewed-by: valeriep, xuelei
 2013-09-18 18:22:49 +08:00
Bradford Wetmore
47f46da3fa 8025694: Rename getStrongSecureRandom based on feedback 
8014838: getStrongSecureRandom() should require at least one implementation

Reviewed-by: mullan, darcy
 2013-10-02 09:38:57 -07:00
Artem Smotrakov
54ebd8d42e 8025123: SNI support in Kerberos cipher suites 
Reviewed-by: weijun, xuelei
 2013-10-01 20:25:44 -07:00
Anthony Scarpino
cf7cbcdce8 8004283: test/sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failing intermittently 
Reviewed-by: vinnie
 2013-09-18 14:57:29 -07:00
Weijun Wang
b16be80c6b 8024861: Incomplete token triggers GSS-API NullPointerException 
Reviewed-by: mullan
 2013-09-27 15:25:18 +08:00
Weijun Wang
c5fd247e16 8022761: regression: SecurityException is NOT thrown while trying to pack a wrongly signed Indexed Jar file 
Reviewed-by: sherman
 2013-08-27 17:50:55 +08:00
Weijun Wang
849788a425 8015669: KerberosPrincipal::equals should ignore name-type 
Reviewed-by: mullan
 2013-08-27 17:50:52 +08:00
Xue-Lei Andrew Fan
cac8b88f48 8022228: Intermittent test failures in sun/security/ssl/javax/net/ssl/NewAPIs 
Reviewed-by: weijun
 2013-08-21 19:44:35 -07:00
Xue-Lei Andrew Fan
2e2313ef87 8020842: IDN do not throw IAE when hostname ends with a trailing dot 
Reviewed-by: weijun, michaelm
 2013-08-19 17:42:39 -07:00
Xue-Lei Andrew Fan
1cff90b335 8024068: sun/security/ssl/javax/net/ssl/ServerName/IllegalSNIName.java fails 
Reviewed-by: weijun
 2013-09-01 20:00:03 -07:00
Weijun Wang
9688bbb771 8021789: jarsigner parses alias as command line option (depending on locale) 
Reviewed-by: vinnie
 2013-08-02 08:59:37 +08:00
Anthony Scarpino
eae349e914 8020424: The NSS version should be detected before running crypto tests 
Reviewed-by: valeriep
 2013-07-29 13:43:24 -07:00
Anthony Scarpino
a7dbbbddcd 8012971: PKCS11Test hiding exception failures 
Reviewed-by: vinnie, valeriep
 2013-07-19 11:34:33 -07:00
Lana Steuck
ac26dd6009 Merge 2013-07-26 15:16:53 -07:00
Rajan Halade
26d9259db7 8019544: Need to run ProviderTest.java in othervm mode 
Reviewed-by: wetmore, xuelei, vinnie
 2013-07-26 14:16:53 -07:00
Lana Steuck
29041e2c4a Merge 2013-07-26 14:07:32 -07:00
Jason Uh
e01b8f673e 8016916: UnstructuredName should support DirectoryString 
Reviewed-by: mullan
 2013-07-24 12:48:10 -07:00
Lana Steuck
ee1b9621d9 Merge 2013-07-22 17:37:15 -07:00
Weijun Wang
2842af69c0 8019410: sun/security/krb5/auto/ReplayCacheTestProc.java 
Reviewed-by: mullan
 2013-07-13 08:47:49 +08:00
David Katleman
1ad2c364d6 8020414: JDK8 b98 source with GPL header errors 
Reviewed-by: darcy, lancea, iris
 2013-07-11 14:03:31 -07:00
Valerie Peng
a4223b53c1 8020321: Problem in PKCS11 regression test TestRSAKeyLength 
Corrected the "isValidKeyLength" array

Reviewed-by: xuelei
 2013-07-11 11:43:23 -07:00
Weijun Wang
2241a3720d 8019267: NPE in AbstractSaslImpl when trace level >= FINER in KRB5 
Reviewed-by: mullan
 2013-07-10 15:11:32 +08:00
Bradford Wetmore
2c7b97640d 8019341: Update CookieHttpsClientTest to use the newer framework 
Reviewed-by: xuelei, smarks, michaelm
 2013-07-05 18:22:58 -07:00
Xue-Lei Andrew Fan
d22a89a1ae 8017049: rename property jdk.tls.rejectClientInitializedRenego 
Reviewed-by: vinnie, wetmore, mullan
 2013-06-26 06:32:40 -07:00
Weijun Wang
cb9be51085 8017453: ReplayCache tests fail on multiple platforms 
Reviewed-by: xuelei
 2013-06-24 16:25:28 +08:00
Weijun Wang
af996219c7 8001326: Improve Kerberos caching 
Reviewed-by: valeriep
 2013-06-21 18:26:13 +08:00
Xue-Lei Andrew Fan
b0246ef1ae 8017157: catch more exception in test RejectClientRenego 
Reviewed-by: vinnie
 2013-06-20 07:48:49 -07:00
Xue-Lei Andrew Fan
1ead1fc8bc 7188658: Add possibility to disable client initiated renegotiation 
Reviewed-by: weijun, wetmore
 2013-06-19 02:33:07 -07:00
Xue-Lei Andrew Fan
7384a4704e 8000456: Add programmatic deadlock detection in SSLEngineDeadlock 
Reviewed-by: wetmore
 2013-06-18 18:50:13 -07:00
Weijun Wang
1e0ca48079 8015274: TEST_BUG: Step2: After selecting 'View Warning Log', it is empty instead of FileNotFound 
8015276: TEST_BUG: The 'ptool.test' can't be saved in the 'tmp' folder
8016158: Instruction is not clear on how to use keytool to create JKS store in case

Reviewed-by: mullan
 2013-06-13 10:00:00 +08:00
Weijun Wang
77e684366c 8014310: JAAS/Krb5LoginModule using des encytypes failure with NPE after JDK-8012679 
Reviewed-by: valeriep
 2013-06-13 09:59:29 +08:00
Pasi Eronen
b888136f12 8014618: Need to strip leading zeros in TlsPremasterSecret of DHKeyAgreement 
Reviewed-by: xuelei
 2013-05-30 22:02:43 -07:00
Weijun Wang
c43d7aa0de 8014196: ktab creates a file with zero kt_vno 
Reviewed-by: valeriep
 2013-05-24 17:15:43 +08:00
Vinnie Ryan
193ed72708 Merge 2013-05-16 02:43:58 -07:00
Stephen Flores
c39030c7b3 7194075: Various classes of sunec.jar are duplicated in rt.jar 
Reviewed-by: mullan, vinnie
 2013-05-14 18:08:18 +01:00
Valerie Peng
fe625d26a3 Merge 2013-05-13 16:52:33 -07:00
Anthony Scarpino
2c0b00cbe0 8001284: Buffer problems with SunPKCS11-Solaris and CKM_AES_CTR 
Changed output length calculation to include incomplete blocks for CTR mode.

Reviewed-by: valeriep
 2013-05-07 14:13:53 -07:00
Valerie Peng
94c8fa5cb1 7196009: SunPkcs11 provider fails to parse config path containing parenthesis 
Enhanced to allow quoted string as library path values.

Reviewed-by: weijun
 2013-05-07 14:06:19 -07:00
Weijun Wang
5ec35be1d2 8010192: Enable native JGSS provider on Mac 
Reviewed-by: valeriep
 2013-05-07 12:30:36 +08:00
Jason Uh
b762ba9ab4 8005922: TEST_BUG: There is no /tmp directory for windows system 
Reviewed-by: weijun
 2013-05-03 15:04:54 -07:00
Jason Uh
33196b314d 8007699: Move some tests from test/sun/security/provider/certpath/X509CertPath to closed repo 
Reviewed-by: mullan
 2013-05-09 12:00:46 -07:00
Weijun Wang
0c02ab3a5e 8012679: Let allow_weak_crypto default to false 
Reviewed-by: valeriep
 2013-05-08 08:25:34 +08:00
Weijun Wang
905250cdfe 8012082: SASL: auth-conf negotiated, but unencrypted data is accepted, reset to unencrypt 
Reviewed-by: vinnie
 2013-05-01 21:05:10 +08:00
Weijun Wang
70b23a07be 8005523: Unbound krb5 for TLS 
Reviewed-by: xuelei
 2013-04-27 18:25:16 +08:00
Alan Bateman
d51ab5c39c 8012530: test/sun/security/provider/SecureRandom/StrongSeedReader.java failing 
Reviewed-by: wetmore
 2013-04-25 17:10:36 -07:00
Weijun Wang
0ec3fd796b 8005527: [TEST_BUG] console.sh failed Automatically with exit code 1 
Reviewed-by: xuelei
 2013-04-22 11:39:53 +08:00
Weijun Wang
ab7ecdd1b3 8009636: JARSigner including TimeStamp PolicyID (TSAPolicyID) as defined in RFC3161 
Reviewed-by: mullan
 2013-04-19 15:41:11 +08:00
Vinnie Ryan
74d720c7b5 Merge 2013-04-17 02:53:02 -07:00
Weijun Wang
dfcf6055a7 8011124: Make KerberosTime immutable 
Reviewed-by: xuelei
 2013-04-17 10:15:33 +08:00
Bradford Wetmore
63a6638ebf 6425477: Better support for generation of high entropy random numbers 
Reviewed-by: xuelei, weijun, mullan
 2013-04-11 21:03:24 -07:00
Xue-Lei Andrew Fan
a973a4d533 8011680: Re-integrate AEAD implementation of JSSE 
It is a re-merge of JDK-7030966.

Reviewed-by: wetmore
 2013-04-11 18:57:14 -07:00
Weijun Wang
b02989edef 8011867: Accept unknown PKCS #9 attributes 
Reviewed-by: vinnie
 2013-04-11 11:09:50 +08:00
Weijun Wang
7d8e86633a 8005460: [findbugs] Probably returned array should be cloned 
Reviewed-by: xuelei
 2013-04-11 10:58:17 +08:00
Weijun Wang
4a64ecdf42 8010125: keytool -importkeystore could create a pkcs12 keystore with different storepass and keypass 
Reviewed-by: vinnie
 2013-03-28 20:27:53 +08:00
Weijun Wang
5f08966515 8009875: Provide a default udp_preference_limit for krb5.conf 
Reviewed-by: valeriep
 2013-03-23 11:49:39 +08:00
Lana Steuck
31330fc47a Merge 2013-03-12 19:04:49 -07:00
Bradford Wetmore
9e5da0ad31 8009925: Back out AEAD CipherSuites temporarily 
Reviewed-by: valeriep
 2013-03-12 15:31:49 -07:00
Weijun Wang
2ec1224ff0 8000653: SPNEGO tests fail at context.getDelegCred().getRemainingInitLifetime(mechOid) 
Reviewed-by: valeriep
 2013-03-09 17:27:58 +08:00
Sean Mullan
6190b5040a Merge 2013-03-01 16:15:23 -05:00
Sean Mullan
6cd495e473 8008908: Access denied when invoking Subject.doAsPrivileged() 
Wildcard principal names are not processed correctly

Reviewed-by: xuelei
 2013-03-01 16:12:50 -05:00
Xue-Lei Andrew Fan
9abb185430 7030966: Support AEAD CipherSuites 
Reviewed-by: weijun, wetmore, valeriep
 2013-03-01 02:34:34 -08:00
Edvard Wendelin
2f5be3ab0d Merge 2013-02-25 08:44:00 +01:00
Mark Sheppard
ec9e303630 8006182: cleanup to use java.util.Base64 in java security component, providers, and regression tests 
Refactored code to use java.util.Base64 Mime Encoder and Decoder as a replacement for sun.misc.BASE64Encoder and sun.misc.BASE64Decoder

Reviewed-by: vinnie, chegar, sherman
 2013-02-21 20:01:22 +00:00
Edvard Wendelin
cbfc80d987 Merge 2013-02-19 21:48:01 +01:00
David Holmes
390cc1d7a1 Merge 2013-02-17 16:44:19 -05:00
Vinnie Ryan
8f58ebc261 8007755: Support the logical grouping of keystores 
Reviewed-by: mullan
 2013-02-13 19:40:51 +00:00
Weijun Wang
d8233ec657 8001104: Unbound SASL service: the GSSAPI/krb5 mech 
Reviewed-by: valeriep
 2013-02-09 16:43:49 +08:00
Edvard Wendelin
11036fb4d5 Merge 2013-02-05 15:35:35 +01:00
Vinnie Ryan
85c0519ca6 8007483: attributes are ignored when loading keys from a PKCS12 keystore 
Reviewed-by: mullan
 2013-02-05 14:25:47 +00:00
David Holmes
eb1726c151 Merge 2013-02-04 18:08:50 -05:00
Vinnie Ryan
ddbfa5fe53 8006994: Cleanup PKCS12 tests to ensure streams get closed 
Reviewed-by: mullan
 2013-02-04 17:20:26 +00:00
Weijun Wang
0c6cb9cdc2 8006564: Test sun/security/util/Oid/S11N.sh fails with timeout on Linux 32-bit 
Reviewed-by: alanb
 2013-02-01 07:39:41 +08:00
Vinnie Ryan
3727e751f6 8006855: PKCS12 test failures due to unsupported algorithm 
Reviewed-by: mullan
 2013-01-24 16:44:15 +00:00
Vinnie Ryan
b680bc8ca7 8005408: KeyStore API enhancements 
Reviewed-by: mullan
 2013-01-23 23:13:54 +00:00
Chris Hegarty
12e480040a 8006669: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/PostThruProxy.sh fails on mac 
Reviewed-by: alanb
 2013-01-23 14:45:44 +00:00
Alan Bateman
a23a1a942b 8004502: Compact Profiles contents 
Reviewed-by: dholmes, mchung
 2013-01-21 23:35:36 -05:00
Jason Uh
3d92cb12a6 8006092: SecurityPermission: printIdentity doesn't exist 
Reviewed-by: weijun
 2013-01-21 15:05:49 +08:00
Jason Uh
5d2a6972af 8005939: sun/security/x509/{X509CRLImplX509CertImpl}/Verify.java fail in confusing way when some providers not present 
Reviewed-by: mullan, weijun
 2013-01-16 13:35:17 -05:00
Jason Uh
68eb431db8 8005389: Backout fix for JDK-6500133 
Reviewed-by: mullan
 2013-01-16 09:51:21 -05:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools 
Reviewed-by: chegar
 2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697 Merge 2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815 Merge 2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac 7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator 
Add new java.security.Principal.implies method

Reviewed-by: alanb
 2013-01-08 19:00:12 -05:00