Commit Graph

44 Commits

Author SHA1 Message Date
Alan Bateman
db4d383614 8142968: Module System implementation
Initial integration of JEP 200, JEP 260, JEP 261, and JEP 282

Co-authored-by: Alex Buckley <alex.buckley@oracle.com>
Co-authored-by: Jonathan Gibbons <jonathan.gibbons@oracle.com>
Co-authored-by: Karen Kinnear <karen.kinnear@oracle.com>
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Chris Hegarty <chris.hegarty@oracle.com>
Co-authored-by: Alexandr Scherbatiy <alexandr.scherbatiy@oracle.com>
Co-authored-by: Amy Lu <amy.lu@oracle.com>
Co-authored-by: Calvin Cheung <calvin.cheung@oracle.com>
Co-authored-by: Daniel Fuchs <daniel.fuchs@oracle.com>
Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com>
Co-authored-by: Harold Seigel <harold.seigel@oracle.com>
Co-authored-by: Jaroslav Bachorik <jaroslav.bachorik@oracle.com>
Co-authored-by: Jean-Francois Denise <jean-francois.denise@oracle.com>
Co-authored-by: Jan Lahoda <jan.lahoda@oracle.com>
Co-authored-by: James Laskey <james.laskey@oracle.com>
Co-authored-by: Lois Foltan <lois.foltan@oracle.com>
Co-authored-by: Miroslav Kos <miroslav.kos@oracle.com>
Co-authored-by: Huaming Li <huaming.li@oracle.com>
Co-authored-by: Sean Mullan <sean.mullan@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Masayoshi Okutsu <masayoshi.okutsu@oracle.com>
Co-authored-by: Peter Levart <peter.levart@gmail.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Claes Redestad <claes.redestad@oracle.com>
Co-authored-by: Sergey Bylokhov <sergey.bylokhov@oracle.com>
Co-authored-by: Alexandre Iline <alexandre.iline@oracle.com>
Co-authored-by: Volker Simonis <volker.simonis@gmail.com>
Co-authored-by: Staffan Larsen <staffan.larsen@oracle.com>
Co-authored-by: Stuart Marks <stuart.marks@oracle.com>
Co-authored-by: Semyon Sadetsky <semyon.sadetsky@oracle.com>
Co-authored-by: Serguei Spitsyn <serguei.spitsyn@oracle.com>
Co-authored-by: Sundararajan Athijegannathan <sundararajan.athijegannathan@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Vincent Ryan <vincent.x.ryan@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Co-authored-by: Yuri Nesterenko <yuri.nesterenko@oracle.com>
Co-authored-by: Yekaterina Kantserova <yekaterina.kantserova@oracle.com>
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Felix Yang <felix.yang@oracle.com>
Co-authored-by: Andrei Eremeev <andrei.eremeev@oracle.com>
Co-authored-by: Frank Yuan <frank.yuan@oracle.com>
Co-authored-by: Sergei Pikalev <sergei.pikalev@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Tiantian Du <tiantian.du@oracle.com>
Co-authored-by: Sha Jiang <sha.jiang@oracle.com>
Reviewed-by: alanb, mchung, naoto, rriggs, psandoz, plevart, mullan, ascarpino, vinnie, prr, sherman, dfuchs, mhaupt
2016-03-17 19:04:16 +00:00
Frank Yuan
371edc6684 8074931: Additional tests for CertPath API
Reviewed-by: mullan
2015-09-15 12:43:12 +03:00
Vinnie Ryan
79e58cc0e5 8132786: java/security/cert/CertPathValidator/OCSP/AIACheck.java fails intermittently
Reviewed-by: mullan
2015-08-24 16:22:37 +01:00
Mandy Chung
53a97cbeb3 8081347: Add @modules to jdk_core tests
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Alan Bateman <alan.bateman@oracle.com>
Reviewed-by: alanb, joehw, lancea
2015-05-28 10:54:48 -07:00
Valerie Peng
d296137c20 8038084: CertStore needs a way to add new CertStore types
Removed internal helper classes and reflection usage for LDAP CertStore.

Reviewed-by: mullan
2015-05-15 01:14:25 +00:00
Jamil Nimeh
823f5f273e 8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream) does not throw CertificateException for invalid input
Reviewed-by: weijun
2014-10-15 11:43:27 -07:00
Artem Smotrakov
727989dc5d 8028591: NegativeArraySizeException in sun.security.util.DerInputStream.getUnalignedBitString()
Reviewed-by: mullan, weijun
2014-03-13 15:13:22 +08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
Sean Mullan
7699817903 8025708: Certificate Path Building problem with AKI serial number
Reviewed-by: xuelei, juh
2014-02-17 11:36:40 -05:00
Artem Smotrakov
f85948cc0c 8028431: NullPointerException in DerValue.equals(DerValue)
Reviewed-by: mullan
2014-01-21 16:54:26 -05:00
Joe Darcy
48ce9464b0 8031651: Remove unneeded -source and -target flags in jdk repo regression tests
Reviewed-by: dfuchs, mullan
2014-01-14 10:08:24 -08:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property
Reviewed-by: mullan, weijun
2014-01-13 21:12:58 -08:00
Sergey Bylokhov
9ab430a0d2 8027696: Incorrect copyright header in the tests
Reviewed-by: alanb, malenkov, mullan
2013-11-12 20:24:25 +04:00
Jason Uh
c6ac4eb557 8025287: NPE in api/java_security/cert/PKIXRevocationChecker/GeneralTests_GeneralTests
Reviewed-by: mullan
2013-10-22 11:57:38 -07:00
Sean Mullan
23d61e9b45 8023362: Don't allow soft-fail behavior if OCSP responder returns "unauthorized"
Reviewed-by: vinnie, xuelei
2013-09-06 12:04:18 -04:00
Sean Mullan
5c30826657 Merge 2013-07-25 11:09:28 -04:00
Sean Mullan
74a0cc9f37 8010748: Add PKIXRevocationChecker NO_FALLBACK option and improve SOFT_FAIL option
Reviewed-by: vinnie
2013-07-25 10:58:00 -04:00
Vinnie Ryan
3300eed0bb 8019627: RuntimeException gets obscured during OCSP cert revocation checking
Reviewed-by: mullan
2013-07-12 20:44:34 +01:00
Vinnie Ryan
53ecefacac 8019259: Failover to CRL checking does not happen if wrong OCSP responder URL is set
Reviewed-by: xuelei
2013-07-01 14:39:47 +01:00
David Holmes
eb1726c151 Merge 2013-02-04 18:08:50 -05:00
Alan Bateman
a23a1a942b 8004502: Compact Profiles contents
Reviewed-by: dholmes, mchung
2013-01-21 23:35:36 -05:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Xue-Lei Andrew Fan
6d41a58c82 7109274: Restrict the use of certificates with RSA keys less than 1024 bits
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.

Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
Mark Sheppard
c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Sean Mullan
5b23307a8f 7171570: JEP 124 Potential API Changes
Reviewed-by: vinnie, xuelei
2012-11-05 10:30:49 -05:00
Sean Mullan
6ad27831e0 7176326: CertPath/CertPathBuilderTest failures after webrev 6854712_6637288_7126011
Reviewed-by: xuelei
2012-06-15 08:43:31 -04:00
Sean Mullan
14c586557e 6854712: Revocation checking enhancements (JEP-124)
6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE

Reviewed-by: xuelei
2012-05-30 17:19:46 -04:00
Weijun Wang
314c75c742 7020531: test: java/security/cert/CertificateFactory/openssl/OpenSSLCert.java file not closed after run
Reviewed-by: alanb, smarks
2011-03-01 16:22:22 +08:00
Sean Mullan
8676006f11 6994717: expired certificate in test ValidateCertPath
Reviewed-by: vinnie
2010-11-08 11:33:24 -05:00
Kelly O'Hair
f7e31fc6c2 6982137: Rebranding pass 2 - missed copyright changes
Reviewed-by: mbykov
2010-09-09 16:26:46 -07:00
Lana Steuck
fd45b4188c Merge 2010-05-28 12:10:14 -07:00
Kelly O'Hair
fe008ae27a 6943119: Rebrand source copyright notices
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
Weijun Wang
37ae69dba3 6948781: CertificateFactory.generateCertificate doesn't throw CertificateException for malformed certificate
Reviewed-by: mullan
2010-05-24 09:37:16 +08:00
Weijun Wang
512e4f93a3 6813340: X509Factory should not depend on is.available()==0
Reviewed-by: xuelei
2010-03-25 12:07:42 +08:00
Joe Darcy
c40412f4f4 6907177: Update jdk tests to remove unncessary -source and -target options
Reviewed-by: ohair
2009-12-03 18:19:10 -08:00
Xue-Lei Andrew Fan
5ba2fd7d33 6852744: PIT b61: PKI test suite fails because self signed certificates are beingrejected
Make the builder aware of SKID/AKID, break the internal circular dependences

Reviewed-by: mullan
2009-07-10 17:27:13 +08:00
Xue-Lei Andrew Fan
06370a8f01 6845286: Add regression test for name constraints
Create regression test cases on name constraints

Reviewed-by: weijun
2009-05-27 17:48:22 +08:00
Xue-Lei Andrew Fan
93614a3c7d 6720721: CRL check with circular depency support needed
Checking AKID of certificates and CRLs

Reviewed-by: mullan, weijun
2009-05-26 16:43:22 +08:00
Xue-Lei Andrew Fan
6a44e920f6 6383095: CRL revoked certificate failures masked by OCSP failures
Remove the mask if certificate revoked

Reviewed-by: mullan
2009-03-17 11:54:13 +08:00
Weijun Wang
7465090acf 6535697: keytool can be more flexible on format of PEM-encoded X.509 certificates
Reviewed-by: vinnie
2009-02-23 10:03:36 +08:00
Sean Mullan
cb4eb96188 6765046: CertPathValidatorException(Throwable).getMessage() always returns null since b37
Reviewed-by: vinnie
2008-11-06 12:12:39 -05:00
Sean Mullan
545b7e4f62 6465942: Add problem identification facility to the CertPathValidator framework
Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.

Reviewed-by: vinnie
2008-09-11 14:05:16 -04:00
Sean Mullan
f44f03f9ea 6714842: CertPathBuilder returns incorrect CertPath for BasicConstraints in builderParams
Do not consider CA target certificates if selector.getBasicConstraints() == -2

Reviewed-by: vinnie
2008-06-19 14:20:43 -04:00
J. Duke
319a3b9947 Initial load 2007-12-01 00:00:00 +00:00