Commit Graph

647 Commits

Author SHA1 Message Date
Andy Herrick
974a4682e4 Merge 2009-06-29 12:06:42 -04:00
Weijun Wang
1d5c589340 6851973: ignore incoming channel binding if acceptor does not set one
Reviewed-by: valeriep
2009-06-19 18:03:27 +08:00
Weijun Wang
f5d1fbc0b4 6712755: jarsigner fails to sign itextasian.jar since 1.5.0_b14, it works with 1.5.0_13
Reviewed-by: mullan
2009-06-18 11:12:13 +08:00
Weijun Wang
7b2694f5b3 6849275: enhance krb5 reg tests
Reviewed-by: xuelei
2009-06-17 15:26:58 +08:00
Andy Herrick
e487e25584 6797688: Umbrella: Merge all JDK 6u4 - 6u12 deployment code into JDK7
6845973: Update JDK7 with deployment changes in 6u13, 6u14
4802695: Support 64-bit Java Plug-in and Java webstart on Windows/Linux on AMD64
6825019: DownloadManager should not be loaded and referenced for full JRE
6738770: REGRESSION:JSException throws when use LiveConnect javascript facility
6772884: plugin2 : java.lang.OutOfMemoryError or crash
6707535: Crossing domain hole affecting multiple sites/domains using plug-in
6728071: Non-verification of Update files may allow unintended updates
6704154: Code loaded from local filesystem should not get access to localhost
6727081: Web Start security restrictions bypass using special extension jnlp
6727079: Java Web Start Socket() restriction bypass
6727071: Cache location/user name information disclosure in SingleInstanceImpl
6716217: AppletClassLoader adds permissions based on codebase regardless of CS
6694892: Java Webstart inclusion via system properties override [CVE-2008-2086]
6704074: localhost socket access due to cache location exposed
6703909: Java webstart arbitrary file creation using nativelib
6665315: browser crashes when deployment.properties has more slashes ( / )
6660121: Encoding values in JNLP files can cause buffer overflow
6606110: URLConnection.setProxiedHost for resources that are loaded via proxy
6581221: SSV(VISTA): Redirection FAILS to work if user does a downgrade install
6609756: Buffer Overflow in Java ActiveX component
6608712: Bypassing the same origin policy in Java with crafted names
6534630: "gnumake clobber" doesn't
6849953: JDK7 - replacement of bufferoverflowU.lib on amd64 breaks build
6849029: Need some JDK7 merge clean-up after comments on the webrev
6847582: Build problem on JDK7 with isSecureProperty in merge
6827935: JDK 7 deployment merging - problem in Compiler-msvm.gmk
6823215: latest merge fixes from 6u12 -> JDK7
6816153: further mergers for JDK7 deployment integration
6807074: Fix Java Kernel and JQS in initial JDK7 builds

Initial changeset for implementing 6uX Deployment Features into JDK7

Reviewed-by: dgu, billyh
2009-06-12 14:56:32 -04:00
Weijun Wang
8a52d1a9d5 6578647: Undefined requesting URL in java.net.Authenticator.getPasswordAuthentication()
Reviewed-by: chegar, valeriep
2009-06-09 14:17:05 +08:00
Xue-Lei Andrew Fan
5f228867b6 6822460: support self-issued certificate
Checking self-issued certificate during certification path building

Reviewed-by: mullan, weijun
2009-05-26 16:19:18 +08:00
Weijun Wang
04e56f7701 6682516: SPNEGO_HTTP_AUTH/WWW_KRB and SPNEGO_HTTP_AUTH/WWW_SPNEGO failed on all non-windows platforms
Reviewed-by: xuelei
2009-05-20 10:12:00 +08:00
Weijun Wang
2827ff39e5 6714845: Quotes in Kerberos configuration file are included in the values
Reviewed-by: xuelei
2009-04-09 15:32:55 +08:00
Weijun Wang
67bb035b94 4811968: ASN.1 (X509Certificate) implementations don't handle large OID components
Reviewed-by: xuelei
2009-04-08 13:54:34 +08:00
Weijun Wang
b01525e89b 6825352: support self-issued certificate in keytool
Reviewed-by: xuelei
2009-04-03 11:36:19 +08:00
Weijun Wang
739414c177 6802846: jarsigner needs enhanced cert validation(options)
Reviewed-by: xuelei
2009-03-27 11:05:45 +08:00
Weijun Wang
827d425560 6819272: keytool -importcert should read the whole input
Reviewed-by: xuelei
2009-03-19 11:17:06 +08:00
Weijun Wang
78ae650f8f 6815182: GSSAPI/SPNEGO does not work with server using MIT Kerberos library
Reviewed-by: valeriep
2009-03-13 09:20:56 +08:00
Weijun Wang
5f12c03c56 6813402: keytool cannot -printcert entries without extensions
Reviewed-by: xuelei
2009-03-05 14:49:55 +08:00
Xue-Lei Andrew Fan
d1f800c577 5067458: Loopback SSLSocketImpl createSocket is throwing an exception
A null hostname should be regarded as a loopback address.

Reviewed-by: weijun
2009-02-23 17:32:52 +08:00
Weijun Wang
3a37d195f3 6780416: New keytool commands/options: -gencert, -printcertreq, -ext
Reviewed-by: xuelei, mullan
2009-02-23 10:05:55 +08:00
Weijun Wang
500caf95bd 6803376: BasicConstraintsExtension does not encode when (ca==false && pathLen<0)
Reviewed-by: xuelei
2009-02-23 10:05:41 +08:00
Weijun Wang
9081658837 6804045: DerValue does not accept empty OCTET STRING
Reviewed-by: xuelei
2009-02-23 10:04:52 +08:00
Weijun Wang
967dd884ac 6789935: cross-realm capath search error
Reviewed-by: xuelei
2009-02-23 10:04:25 +08:00
Xue-Lei Andrew Fan
f202d9a6e1 6697270: Inputstream dosent behave correct
Do not try to read zero byte from a InputStream, and do always return immediately for zero byte reading in a InputStream implementation.

Reviewed-by: weijun
2009-02-20 13:05:28 +08:00
Xue-Lei Andrew Fan
df345d27f4 6782783: regtest HttpsURLConnection/B6216082.java throws ClosedByInterruptException
Make the test robust

Reviewed-by: weijun
2009-02-04 19:10:09 +08:00
Weijun Wang
e7c217c72d 6552334: Enable DNS in Kerberos by default
Reviewed-by: valeriep
2009-02-03 09:38:13 +08:00
Xue-Lei Andrew Fan
8db7ed98ea 6728126: Parsing Extensions in Client Hello message is done in a wrong way
The inputStream.read(byte[], int, 0) is not always return zero.

Reviewed-by: wetmore, weijun
2008-11-13 23:08:11 -08:00
Weijun Wang
5c6f569aa5 6765491: Krb5LoginModule a little too restrictive, and the doc is not clear
Reviewed-by: valeriep
2008-11-12 16:01:06 +08:00
Weijun Wang
9f36c3b7c7 6733095: Failure when SPNEGO request non-Mutual
Reviewed-by: valeriep
2008-11-12 16:00:22 +08:00
Weijun Wang
d9d3a81168 6761072: new krb5 tests fail on multiple platforms
Reviewed-by: xuelei
2008-10-20 10:32:33 +08:00
Weijun Wang
f134b5139a 6706974: Add krb5 test infrastructure
Reviewed-by: valeriep
2008-10-17 13:02:00 +08:00
Weijun Wang
6d08d079f0 6731685: CertificateFactory.generateCertificates throws IOException on PKCS7 cert chain
Reviewed-by: mullan
2008-08-06 08:11:49 +08:00
Bradford Wetmore
54618c0601 Merge 2008-07-23 12:16:28 -07:00
Weijun Wang
9ac27197df 6480981: keytool should be able to import certificates from remote SSL servers
Reviewed-by: vinnie, wetmore
2008-07-09 12:03:16 +08:00
Xiomara Jayasena
2617d1d179 6719955: Update copyright year
Update copyright year for files that have been modified in 2008

Reviewed-by: ohair, tbell
2008-07-02 12:55:45 -07:00
Weijun Wang
b572eb5b2b 6711435: console.sh uses incompatible ==
Reviewed-by: xuelei
2008-06-10 11:03:23 +08:00
Xue-Lei Andrew Fan
720109f8ec 6690018: RSAClientKeyExchange NullPointerException
Checking certificate key length for RSA_EXPORT key exchange

Reviewed-by: wetmore, mullan
2008-06-04 09:56:14 +08:00
Weijun Wang
c0dfc6ea21 6705313: Incorrect exit $? in keytool's autotest.sh
Reviewed-by: valeriep
2008-05-27 14:29:32 +08:00
Bradford Wetmore
e072682162 6706358: jdk/test/sun/security/pkcs11/Cipher/TestSymmCiphers.java has the wrong copyright notice
Reviewed-by: valeriep
2008-05-22 14:20:53 -07:00
Xue-Lei Andrew Fan
2dddf4033e 6668231: Presence of a critical subjectAltName causes JSSE's SunX509 to fail trusted checks
Make the critical extension known to end entity checker.

Reviewed-by: wetmore, mullan
2008-04-02 22:44:45 -04:00
Valerie Peng
adaa79491e 6599979: KeyStore.setEntry/setKeyEntry() do not override existing entry for secret key objects
Override existing secret key entry when setEntry/setKeyEntry() is called

Reviewed-by: andreas
2008-03-20 18:41:05 -07:00
Valerie Peng
4b9b2408f3 6572331: regression: cipher.wrap operation fails with CKR_ATTRIBUTE_VALUE_INVALID
Check supported key size range and use encryption if needed

Reviewed-by: andreas
2008-03-20 17:17:10 -07:00
Valerie Peng
83d7d2cdfb 4898461: Support for ECB and CBC/PKCS5Padding
Add support for ECB mode and PKCS5Padding

Reviewed-by: andreas
2008-03-20 16:02:23 -07:00
Xue-Lei Andrew Fan
04886b6f44 6447412: Issue with socket.close() for ssl sockets when poweroff on other system
Support SSL sockets SOLINGER

Reviewed-by: chegar
2008-03-17 03:11:29 -04:00
Xue-Lei Andrew Fan
4a616b5705 6618387: SSL client sessions do not close cleanly. A TCP reset occurs instead of a close_notify alert
CloseIdelConnection() does not query the cached connection correctly.

Reviewed-by: chegar
2008-03-16 01:37:44 -04:00
Weijun Wang
7434ffcbfb 6673164: dns_fallback parse error
Reviewed-by: valeriep
2008-03-12 09:32:38 +08:00
Weijun Wang
e75aa5c3ab 6643094: Test on keytool -startdate forgets about December
Reviewed-by: xuelei
2008-03-08 22:51:14 +08:00
Weijun Wang
0c6743a970 6590930: reed/write does not match for ccache
Add null-awareness to ccache read

Reviewed-by: valeriep
2008-03-05 22:15:45 +08:00
Weijun Wang
578a880fee 6648972: KDCReq.init always read padata
PA-DATA is optional, only read it when it exists

Reviewed-by: valeriep
2008-03-05 21:55:33 +08:00
J. Duke
319a3b9947 Initial load 2007-12-01 00:00:00 +00:00