Commit Graph

643 Commits

Author SHA1 Message Date
Weijun Wang
0f5abfa052 8077670: sun/security/krb5/auto/MaxRetries.java may fail with BindException
Reviewed-by: chegar
2015-08-27 07:52:12 +08:00
Iris Clark
7c55ca4ce4 Merge 2015-08-25 14:45:26 -07:00
Iris Clark
8db18e0442 Merge 2015-08-17 13:02:48 -07:00
Vinnie Ryan
cdb7f50a4b 8133318: Exclude intermittent failing PKCS11 tests on Solaris SPARC 11.1 and earlier
Reviewed-by: mullan
2015-08-12 14:38:09 +01:00
Jamil Nimeh
e7f31340a0 8046321: OCSP Stapling for TLS
Initial feature commit for OCSP stapling in JSSE

Reviewed-by: xuelei, mullan
2015-08-05 12:19:38 -07:00
Iris Clark
959eee3901 Merge 2015-08-03 09:26:18 -07:00
Weijun Wang
31e49478d4 8132111: Do not request for addresses for forwarded TGT
Reviewed-by: mullan
2015-08-03 09:25:02 +08:00
Iris Clark
636d3c2d95 Merge 2015-07-23 13:19:54 -07:00
Weijun Wang
e81669d5df 8131051: KDC might issue a renewable ticket even if not requested
Reviewed-by: xuelei
2015-07-21 18:02:36 +08:00
Iris Clark
89a565ccd0 Merge 2015-07-20 11:01:24 -07:00
Iris Clark
3542628ec7 8130696: Security Providers need to have their version numbers updated for JDK 9
Reviewed-by: ascarpino, mullan, valeriep, weijun, wetmore
2015-07-20 09:40:49 -07:00
Xue-Lei Andrew Fan
a9da78ecd7 8081760: Better group dynamics
Allows user to specify custom DH groups. Also reviewed by Alexander Fomin <alexander.fomin@oracle.com>.

Reviewed-by: coffeys, mullan, weijun, jnimeh, ahgross, asmotrak
2015-07-20 01:45:23 +00:00
Artem Smotrakov
a57b0dd1c8 8075297: Tests for RFEs 4515853 and 4745056
Reviewed-by: weijun
2015-07-17 17:30:55 -07:00
Bhanu Prakash Gopularam
13a6fbe6c0 8048830: Implement tests for new functionality provided in JEP 166
Reviewed-by: vinnie
2015-07-15 15:07:58 +01:00
Weijun Wang
cdc2a29ff2 8130112: Create a common TEST.properties for @modules in test/sun/security/krb5/auto
Reviewed-by: alanb
2015-07-02 16:20:43 +08:00
Weijun Wang
aebcb1754e 8130720: BadKDC1 failed again
Reviewed-by: xuelei
2015-07-08 17:30:38 +08:00
Sibabrata Sahoo
afc6a95457 8075301: Tests for sun.security.krb5.principal system property
Reviewed-by: weijun
2015-06-30 22:32:03 +08:00
Jason Uh
84ebc260b9 8022444: Remove sun.security.util.ObjectIdentifier.equals(ObjectIdentifier other) method
Reviewed-by: mullan
2015-06-29 16:36:44 -07:00
Weijun Wang
0a6597b64e 8058849: test/sun/security/krb5/config/dns.sh needs to re-examined or replaced
Reviewed-by: alanb
2015-06-29 17:11:17 +08:00
Valerie Peng
5109058c5d 7191662: JCE providers should be located via ServiceLoader
Enhanced to use ServiceLoader and switched provider to Provider.Service model.

Reviewed-by: mullan, alanb, mchung
2015-06-26 21:34:34 +00:00
Weijun Wang
7b990654c5 8023546: sun/security/mscapi/ShortRSAKey1024.sh fails intermittently
Reviewed-by: vinnie
2015-06-25 09:03:23 +08:00
Weijun Wang
d922187012 8031111: fix krb5 caddr
Reviewed-by: valeriep
2015-06-04 15:29:29 +08:00
Weijun Wang
625d9cb9b8 8079821: MSOID2.java test is not perfect
Reviewed-by: valeriep
2015-06-04 15:29:23 +08:00
Weijun Wang
1f705ef606 8038089: TLS optional support for Kerberos cipher suites needs to be re-examine
Reviewed-by: xuelei
2015-06-02 22:26:36 +08:00
Xue-Lei Andrew Fan
0f1698f906 8043758: Datagram Transport Layer Security (DTLS)
Reviewed-by: jnimeh, weijun, mullan, wetmore
2015-06-02 04:01:04 +00:00
Ivan Gerasimov
97f5b473ec 8081027: Create a common test to check adequacy of initial size of static HashMap/ArrayList fields
Reviewed-by: martin
2015-05-29 19:20:22 +03:00
Mandy Chung
53a97cbeb3 8081347: Add @modules to jdk_core tests
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Alan Bateman <alan.bateman@oracle.com>
Reviewed-by: alanb, joehw, lancea
2015-05-28 10:54:48 -07:00
Artem Smotrakov
6b7bbd4884 8050374: More Signature tests
Reviewed-by: valeriep
2015-05-25 11:47:41 +03:00
Weijun Wang
041dbf030e 8048030: Expectations should be consistent
Reviewed-by: valeriep, mullan, ahgross
2015-05-24 16:35:12 +08:00
Rob McKenna
efc37c5e71 8077155: LoginContext Subject ignored by jdk8 sun.net.www.protocol.http.HttpURLConnection
Reviewed-by: michaelm
2015-05-20 18:06:31 +01:00
Weijun Wang
ae7da8e119 8077102: dns_lookup_realm should be false by default
Reviewed-by: valeriep
2015-05-19 09:09:09 +08:00
Phil Race
95cc940989 Merge 2015-05-13 08:37:34 -07:00
Chris Hegarty
008fee0591 8079782: RandomFactory should be in the jdk.testlibrary package
Reviewed-by: bpb
2015-05-08 11:02:33 +01:00
Jason Uh
53ae2943eb 8058543: Certificate returns null Subject Alternative Name if it is an X400Address type
Reviewed-by: weijun
2015-05-05 14:44:39 -07:00
Phil Race
b8cf472fe8 Merge 2015-05-05 13:29:31 -07:00
Vinnie Ryan
99e090089e 8079129: NullPointerException in PKCS#12 Keystore in PKCS12KeyStore.java
Reviewed-by: weijun
2015-05-05 17:55:16 +01:00
Weijun Wang
3db31d77fc 8078439: SPNEGO auth fails if client proposes MS krb5 OID
Reviewed-by: valeriep
2015-05-05 21:14:12 +08:00
Joe Darcy
7dfccc294e 8079107: Update TestKeyPairGenerator.java to use random number generator library
Reviewed-by: mullan
2015-04-30 16:51:53 -07:00
Joe Darcy
86c109e149 8078334: Mark regression tests using randomness
Reviewed-by: xuelei, alanb
2015-04-29 10:25:53 -07:00
Phil Race
60bb43ad32 Merge 2015-04-29 08:52:47 -07:00
Joe Darcy
84bc5a8a04 8078880: Mark a few more intermittently failuring security-libs
Reviewed-by: xuelei
2015-04-29 08:37:57 -07:00
Phil Race
96700da961 Merge 2015-04-27 09:17:39 -07:00
Artem Smotrakov
64969c0889 8075007: Additional tests for krb5-related cipher suites with unbound server
Reviewed-by: weijun
2015-04-27 21:02:40 +08:00
Vinnie Ryan
9ef4bd4a6c 8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
Reviewed-by: xuelei
2015-04-22 14:01:01 +01:00
Xue-Lei Andrew Fan
b7bf7fd3fd 8076328: Enforce key exchange constraints
Reviewed-by: wetmore, igerasim, ahgross, asmotrak
2015-04-22 05:09:54 +00:00
Jason Uh
454ec2e69d 7194452: Remove "Reverse" PKIX CertPathBuilder implementation
Reviewed-by: mullan
2015-04-17 11:51:47 -07:00
Phil Race
041bb07b95 Merge 2015-04-15 14:28:43 -07:00
Artem Smotrakov
dc99c45870 8076221: Disable RC4 cipher suites
Reviewed-by: xuelei, wetmore
2015-04-15 07:34:24 +00:00
Jason Uh
31a7b46b00 8076117: EndEntityChecker should not process custom extensions after PKIX validation
Reviewed-by: xuelei, mullan
2015-04-14 13:02:23 -07:00
Shobhit Gupta
609fc7915d 8076069: [macosx][TESTBUG] tests failing with Unrecognized system error
Reviewed-by: serb, azvegint, kshefov
2015-04-13 19:39:40 +03:00
Weijun Wang
3fbfa7ee89 8074935: jdk8 keytool doesn't validate pem files for RFC 1421 correctness, as jdk7 did
Reviewed-by: mullan
2015-03-23 08:51:51 +08:00
Joe Darcy
ed05aef3fc 8075567: Mark intermittently failuring security-libs tests
Reviewed-by: mullan
2015-03-22 10:27:22 -07:00
Jamil Nimeh
a55dd41fc7 8074064: OCSPResponse.SingleResponse objects do not parse singleExtensions
Reviewed-by: mullan, vinnie
2015-03-13 09:32:54 -07:00
Weijun Wang
2bcc0c7789 8074018: Named extension not recognized in keytool -ext honored after 8073182
Reviewed-by: mullan
2015-02-28 10:47:07 +08:00
Weijun Wang
c12ac1b4cc 8073853: KeyToolTest.java has too many too long lines
Reviewed-by: mullan
2015-02-26 08:08:52 +08:00
Weijun Wang
b505d5ad05 8073182: keytool may generate duplicate extensions
Reviewed-by: mullan
2015-02-25 18:30:29 +08:00
Weijun Wang
ed25ae3aeb 8073181: keytool -ext honored not working correctly
Reviewed-by: mullan
2015-02-25 18:30:07 +08:00
Jason Uh
9a2cc32b19 8072663: Remove the sun.security.acl package which is not used in the JDK
Reviewed-by: mullan, alanb, mchung
2015-02-23 11:40:48 -08:00
Jason Uh
f7f4ab9df6 8042967: Add variant of DSA Signature algorithms that do not ASN.1 encode the signature bytes
Reviewed-by: mullan
2015-02-17 10:48:24 -08:00
Anthony Scarpino
ad70e04133 8022313: sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in aurora
Reviewed-by: mullan
2015-02-13 10:44:53 -08:00
Rob McKenna
4c95aedcd9 8065553: Failed Java web start via IPv6 (Java7u71 or later)
Reviewed-by: xuelei
2015-02-10 23:32:48 +00:00
Artem Smotrakov
9ed9f4f4a9 8130041: TsacertOptionTest.java intermittently fails on Mac
Reviewed-by: vinnie
2015-07-14 16:46:28 +01:00
Weijun Wang
5d91ae3352 8058290: JAAS Krb5LoginModule has suspect ticket-renewal logic, relies on clockskew grace
Reviewed-by: mullan
2015-07-13 17:44:34 +08:00
Weijun Wang
873b88dcc9 8022582: Relax response flags checking in sun.security.krb5.KrbKdcRep.check
Reviewed-by: mullan
2015-01-27 18:16:27 +08:00
Weijun Wang
6a34176e9c 8071562: TimestampCheck.java change removes a whitespace between command and args
Reviewed-by: alanb
2015-01-26 21:55:05 +08:00
Artem Smotrakov
1eeff6da6e 8049171: Additional tests for jarsigner's warnings
Reviewed-by: weijun
2015-01-26 18:13:42 +08:00
Weijun Wang
ddba00b834 8055045: StringIndexOutOfBoundsException while reading krb5.conf
Reviewed-by: mullan
2015-01-26 09:29:29 +08:00
Jamil Nimeh
3d738985d7 8044860: Vectors and fixed length fields should be verified for allowed sizes
Reviewed-by: xuelei
2015-01-22 20:19:42 -08:00
Vinnie Ryan
d80497254d 8069155: The value of 'KeyStore Type' isn't 'jks'
Reviewed-by: xuelei
2015-01-22 12:33:05 +00:00
Xue-Lei Andrew Fan
83143ef7f8 8061210: Issues in TLS
Reviewed-by: jnimeh, mullan, wetmore, ahgross, asmotrak
2014-11-03 08:30:18 +00:00
Peter Levart
4029366de9 8047769: SecureRandom should be more frugal with file descriptors
Introduce FileInputStreamPool to cache open FileInputStreams

Reviewed-by: wetmore, alanb, chegar
2015-01-21 12:49:53 +01:00
Jason Uh
3793acecce 8059916: Change default criticality of policy mappings and policy constraints certificate extensions
Reviewed-by: mullan
2015-01-13 14:33:54 -08:00
Artem Smotrakov
e268dee361 8048603: Additional tests for MAC algorithms
Reviewed-by: valeriep
2015-01-13 14:26:34 +03:00
Valerie Peng
ac09164efa 8039921: SHA1WithDSA with key > 1024 bits not working
Removed the key size limits for all SHAXXXWithDSA signatures

Reviewed-by: weijun
2014-12-30 22:03:23 +00:00
Vinnie Ryan
befd7d1c25 8044445: JEP 229: Create PKCS12 Keystores by Default
Reviewed-by: mullan, weijun
2014-12-23 16:30:57 +00:00
Valerie Peng
86291780cb 8062170: java.security.ProviderException: Error parsing configuration with space
Updated to parse library path as a line which can contain quoted strings.

Reviewed-by: vinnie
2014-12-12 00:23:32 +00:00
Weijun Wang
26099e744a 8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes
Reviewed-by: valeriep
2014-12-09 18:28:26 +08:00
David Kocher
15d4deb44a 8046777: apple.security.KeychainStore has a problem searching for identities
Reviewed-by: mullan
2014-11-11 20:11:34 +00:00
Anthony Scarpino
1924ac8a18 8063700: -Xcheck:jni changes cause many JCK failures in api/javax_crypto tests in SunPKCS11
Reviewed-by: mullan, valeriep
2014-11-07 13:07:09 -08:00
Weijun Wang
ed9e73bb66 8057810: New defaults for DSA keys in jarsigner and keytool
Reviewed-by: vinnie
2014-11-05 17:15:09 +08:00
Florian Bruckner
9299e8a8a6 8062264: KeychainStore requires non-null password to be supplied when retrieving a private key
Reviewed-by: mullan
2014-10-29 11:53:37 +00:00
Mandy Chung
a76f56165c 8043277: Update jdk regression tests to extend the default security policy instead of override
Reviewed-by: alanb, mullan, chegar, sla
2014-10-27 13:45:39 -07:00
Weijun Wang
cd3c6765c2 8044215: Unable to initiate SpNego using a S4U2Proxy GSSCredential (Krb5ProxyCredential)
Reviewed-by: mullan
2014-10-14 10:08:32 +08:00
Weijun Wang
5468e30603 8029659: Keytool, print key algorithm of certificate or key entry
Reviewed-by: xuelei
2014-10-14 10:07:44 +08:00
Weijun Wang
76b1f8c99c 8060007: Keytool test can use bundled NSS lib on Mac
Reviewed-by: vinnie
2014-10-09 16:05:24 +08:00
Vinnie Ryan
3215ed2f0a 8059627: Enable PKCS11 tests on Mac
Reviewed-by: mullan
2014-10-06 16:44:57 +01:00
Vinnie Ryan
a8d4acac11 8041740: Test sun/security/tools/keytool/ListKeychainStore.sh fails on Mac
Reviewed-by: mullan
2014-10-05 14:24:44 +01:00
Weijun Wang
4a99ec3dce 8059313: Enable keytool NSS test on Mac
Reviewed-by: vinnie
2014-09-28 10:42:50 +08:00
Weijun Wang
f18f44bce3 8042900: Allow com.sun.security.jgss to be in different module than org.ietf.jgss
Reviewed-by: valeriep, alanb
2014-09-17 13:55:12 +08:00
Ivan Gerasimov
13da43d0d4 8055731: sun/security/smartcardio/TestDirect.java throws java.lang.IndexOutOfBoundsException
Reviewed-by: valeriep
2014-08-23 01:05:50 +04:00
Weijun Wang
391a556d14 8054817: File ccache only recognizes Linux and Solaris defaults
Reviewed-by: mullan
2014-08-19 14:30:12 +08:00
Ivan Gerasimov
e3b86ec908 8046343: (smartcardio) CardTerminal.connect('direct') does not work on MacOSX
Reviewed-by: mullan, valeriep
2014-08-07 15:32:23 +04:00
Vinnie Ryan
b572fc9aad 8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
Reviewed-by: mullan
2014-08-05 13:59:15 +01:00
Weijun Wang
d99124eadb 8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
Reviewed-by: mullan
2014-07-21 22:10:37 +08:00
Weijun Wang
0f6c52abb1 8049834: Two security tools tests do not run with only JRE
Reviewed-by: mullan
2014-07-21 22:09:38 +08:00
Weijun Wang
bfa19ebfbc 8043071: Expose session key and KRB_CRED through extended GSS-API
Reviewed-by: mullan
2014-07-19 10:20:42 +08:00
Ivan Gerasimov
80448466d4 8050893: (smartcardio) Invert reset argument in tests in sun/security/smartcardio
Reviewed-by: valeriep
2014-07-18 17:04:10 +04:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
2014-07-10 22:44:58 +00:00
Weijun Wang
57d0562d7c 8044085: Access ExtendedGSSContext.inquireSecContext() result through SASL
Reviewed-by: mullan
2014-07-10 10:44:48 +08:00
Weijun Wang
ea1882be4f 8048073: Cannot read ccache entry with a realm-less service name
Reviewed-by: xuelei
2014-06-25 18:49:02 +08:00