Commit Graph

65 Commits

Author SHA1 Message Date
Weijun Wang
7df23eb45e 8154523: SHA1PRNG output should change after setSeed
Reviewed-by: xuelei
2016-05-11 12:32:00 +08:00
Weijun Wang
b932c60a85 8051408: NIST SP 800-90A SecureRandom implementations
Reviewed-by: wetmore, xuelei, coffeys
2016-05-06 11:38:44 +08:00
Alan Bateman
36e0820801 8154956: Module system implementation refresh (4/2016)
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com>
Co-authored-by: Chris Hegarty <chris.hegarty@oracle.com>
Co-authored-by: Peter Levart <peter.levart@gmail.com>
Co-authored-by: Sundararajan Athijegannathan <sundararajan.athijegannathan@oracle.com>
Reviewed-by: alanb, mchung, chegar, redestad
2016-05-03 09:09:57 +01:00
Valerie Peng
e171854b1c 8138593: Make DSA more fair
Changed nounce K generation to FIPS 186-4 B2.1

Reviewed-by: mullan
2015-12-23 02:31:34 +00:00
Rajan Halade
c86b01dbe8 8154382: Remove intermittent keyword from SupportedDSAParamGen.java
Reviewed-by: xuelei
2016-04-16 01:23:54 +00:00
Xue-Lei Andrew Fan
7f30460ff6 8072452: Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
Reviewed-by: valeriep, mullan, coffeys
2016-04-15 11:09:18 +00:00
Rajan Halade
bf4e4ed961 8055351: sun/security/provider/DSA/TestAlgParameterGenerator.java failed with interrupted! (timed out?)
Reviewed-by: valeriep
2016-04-13 16:05:31 -07:00
Alan Bateman
db4d383614 8142968: Module System implementation
Initial integration of JEP 200, JEP 260, JEP 261, and JEP 282

Co-authored-by: Alex Buckley <alex.buckley@oracle.com>
Co-authored-by: Jonathan Gibbons <jonathan.gibbons@oracle.com>
Co-authored-by: Karen Kinnear <karen.kinnear@oracle.com>
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Chris Hegarty <chris.hegarty@oracle.com>
Co-authored-by: Alexandr Scherbatiy <alexandr.scherbatiy@oracle.com>
Co-authored-by: Amy Lu <amy.lu@oracle.com>
Co-authored-by: Calvin Cheung <calvin.cheung@oracle.com>
Co-authored-by: Daniel Fuchs <daniel.fuchs@oracle.com>
Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com>
Co-authored-by: Harold Seigel <harold.seigel@oracle.com>
Co-authored-by: Jaroslav Bachorik <jaroslav.bachorik@oracle.com>
Co-authored-by: Jean-Francois Denise <jean-francois.denise@oracle.com>
Co-authored-by: Jan Lahoda <jan.lahoda@oracle.com>
Co-authored-by: James Laskey <james.laskey@oracle.com>
Co-authored-by: Lois Foltan <lois.foltan@oracle.com>
Co-authored-by: Miroslav Kos <miroslav.kos@oracle.com>
Co-authored-by: Huaming Li <huaming.li@oracle.com>
Co-authored-by: Sean Mullan <sean.mullan@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Masayoshi Okutsu <masayoshi.okutsu@oracle.com>
Co-authored-by: Peter Levart <peter.levart@gmail.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Claes Redestad <claes.redestad@oracle.com>
Co-authored-by: Sergey Bylokhov <sergey.bylokhov@oracle.com>
Co-authored-by: Alexandre Iline <alexandre.iline@oracle.com>
Co-authored-by: Volker Simonis <volker.simonis@gmail.com>
Co-authored-by: Staffan Larsen <staffan.larsen@oracle.com>
Co-authored-by: Stuart Marks <stuart.marks@oracle.com>
Co-authored-by: Semyon Sadetsky <semyon.sadetsky@oracle.com>
Co-authored-by: Serguei Spitsyn <serguei.spitsyn@oracle.com>
Co-authored-by: Sundararajan Athijegannathan <sundararajan.athijegannathan@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Vincent Ryan <vincent.x.ryan@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Co-authored-by: Yuri Nesterenko <yuri.nesterenko@oracle.com>
Co-authored-by: Yekaterina Kantserova <yekaterina.kantserova@oracle.com>
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Felix Yang <felix.yang@oracle.com>
Co-authored-by: Andrei Eremeev <andrei.eremeev@oracle.com>
Co-authored-by: Frank Yuan <frank.yuan@oracle.com>
Co-authored-by: Sergei Pikalev <sergei.pikalev@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Tiantian Du <tiantian.du@oracle.com>
Co-authored-by: Sha Jiang <sha.jiang@oracle.com>
Reviewed-by: alanb, mchung, naoto, rriggs, psandoz, plevart, mullan, ascarpino, vinnie, prr, sherman, dfuchs, mhaupt
2016-03-17 19:04:16 +00:00
Joe Darcy
0708e4c089 8151228: Mark TestDSAGenParameterSpec.java as intermittently failing
Reviewed-by: xuelei
2016-03-03 22:55:41 -08:00
Alan Bateman
3573d65040 8148147: Sync up @modules from jigsaw/jake
Reviewed-by: chegar, mchung
2016-01-25 19:01:19 +00:00
Weijun Wang
4768e44b34 8085904: Test timeout on Mac
Reviewed-by: wetmore
2015-10-09 09:33:54 +08:00
Sha Jiang
451024f8df 8075286: Additional tests for signature algorithm OIDs and transformation string
SQE test co-location effort

Reviewed-by: valeriep
2015-09-24 18:16:56 +00:00
Artem Smotrakov
f1f48ab0d3 8134232: KeyStore.load() throws an IOException with a wrong cause in case of wrong password
Reviewed-by: vinnie
2015-09-14 19:49:28 +03:00
Jamil Nimeh
60cdefbf44 8134364: Add defensive copies to get/set methods for OCSPNonceExtension
Make OCSPNonceExtension immutable, add defensive copies

Reviewed-by: xuelei, mullan
2015-09-04 09:31:47 -07:00
Jamil Nimeh
e7f31340a0 8046321: OCSP Stapling for TLS
Initial feature commit for OCSP stapling in JSSE

Reviewed-by: xuelei, mullan
2015-08-05 12:19:38 -07:00
Mandy Chung
53a97cbeb3 8081347: Add @modules to jdk_core tests
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Alan Bateman <alan.bateman@oracle.com>
Reviewed-by: alanb, joehw, lancea
2015-05-28 10:54:48 -07:00
Joe Darcy
86c109e149 8078334: Mark regression tests using randomness
Reviewed-by: xuelei, alanb
2015-04-29 10:25:53 -07:00
Jason Uh
454ec2e69d 7194452: Remove "Reverse" PKIX CertPathBuilder implementation
Reviewed-by: mullan
2015-04-17 11:51:47 -07:00
Weijun Wang
3fbfa7ee89 8074935: jdk8 keytool doesn't validate pem files for RFC 1421 correctness, as jdk7 did
Reviewed-by: mullan
2015-03-23 08:51:51 +08:00
Jamil Nimeh
a55dd41fc7 8074064: OCSPResponse.SingleResponse objects do not parse singleExtensions
Reviewed-by: mullan, vinnie
2015-03-13 09:32:54 -07:00
Jason Uh
f7f4ab9df6 8042967: Add variant of DSA Signature algorithms that do not ASN.1 encode the signature bytes
Reviewed-by: mullan
2015-02-17 10:48:24 -08:00
Peter Levart
4029366de9 8047769: SecureRandom should be more frugal with file descriptors
Introduce FileInputStreamPool to cache open FileInputStreams

Reviewed-by: wetmore, alanb, chegar
2015-01-21 12:49:53 +01:00
Valerie Peng
ac09164efa 8039921: SHA1WithDSA with key > 1024 bits not working
Removed the key size limits for all SHAXXXWithDSA signatures

Reviewed-by: weijun
2014-12-30 22:03:23 +00:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
2014-07-10 22:44:58 +00:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual
Reviewed-by: xuelei, wetmore
2014-03-18 15:04:59 -07:00
Jason Uh
323843f397 8021804: Certpath validation fails if validity period of root cert does not include validity period of intermediate cert
Reviewed-by: mullan
2014-03-12 08:55:35 -07:00
Jason Uh
d6207a4ca5 8036844: test failures due to wrong keystore paths
Reviewed-by: weijun
2014-03-07 10:40:03 -08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
2014-01-17 21:54:30 +01:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property
Reviewed-by: mullan, weijun
2014-01-13 21:12:58 -08:00
Vinnie Ryan
242d5a95bd 8028377: test/sun/security/provider/KeyStore/DKSTest.sh attempts to write to ${test.src}
Reviewed-by: alanb, weijun
2013-11-19 15:39:58 +00:00
Vinnie Ryan
f36ff9e467 8008171: Refactor KeyStore.DomainLoadStoreParameter as a standalone class
Reviewed-by: mullan, weijun
2013-10-09 10:48:44 +01:00
Bradford Wetmore
47f46da3fa 8025694: Rename getStrongSecureRandom based on feedback
8014838: getStrongSecureRandom() should require at least one implementation

Reviewed-by: mullan, darcy
2013-10-02 09:38:57 -07:00
Jason Uh
33196b314d 8007699: Move some tests from test/sun/security/provider/certpath/X509CertPath to closed repo
Reviewed-by: mullan
2013-05-09 12:00:46 -07:00
Alan Bateman
d51ab5c39c 8012530: test/sun/security/provider/SecureRandom/StrongSeedReader.java failing
Reviewed-by: wetmore
2013-04-25 17:10:36 -07:00
Bradford Wetmore
63a6638ebf 6425477: Better support for generation of high entropy random numbers
Reviewed-by: xuelei, weijun, mullan
2013-04-11 21:03:24 -07:00
Sean Mullan
6cd495e473 8008908: Access denied when invoking Subject.doAsPrivileged()
Wildcard principal names are not processed correctly

Reviewed-by: xuelei
2013-03-01 16:12:50 -05:00
Vinnie Ryan
8f58ebc261 8007755: Support the logical grouping of keystores
Reviewed-by: mullan
2013-02-13 19:40:51 +00:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697 Merge 2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815 Merge 2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac 7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator
Add new java.security.Principal.implies method

Reviewed-by: alanb
2013-01-08 19:00:12 -05:00
Xue-Lei Andrew Fan
6d41a58c82 7109274: Restrict the use of certificates with RSA keys less than 1024 bits
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.

Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
Mark Sheppard
c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Jason Uh
fdfd7968f7 7198416: CertificateIssuerName and CertificateSubjectName are redundant
Reviewed-by: mullan
2012-11-08 12:51:25 -05:00
Alan Bateman
430592a30e 7197491: update copyright year to match last edit in jdk8 jdk repository
Reviewed-by: chegar, ksrini
2012-11-02 15:50:11 +00:00
Alan Bateman
30d429cc25 8000268: sun/security/provider/X509Factory/BigCRL.java failing on Linux 32-bit
Reviewed-by: mullan
2012-10-02 12:23:16 +01:00
Valerie Peng
a431f9851d 7044060: Need to support NSA Suite B Cryptography algorithms
Add support for DSA parameter generation and OIDs for NSA Suite B algorithms.

Reviewed-by: vinnie
2012-09-04 18:41:06 -07:00
Xue-Lei Andrew Fan
9190ab1d6b 7167988: PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified
Reviewed-by: mullan
2012-05-14 07:26:53 -07:00