Commit Graph

138 Commits

Author SHA1 Message Date
Artur Barashev
697f27c5d5 8341964: Add mechanism to disable different parts of TLS cipher suite
Reviewed-by: mullan, ascarpino
2024-11-14 17:44:13 +00:00
Sean Mullan
db85090553 8338411: Implement JEP 486: Permanently Disable the Security Manager
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Brian Burkhalter <bpb@openjdk.org>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Co-authored-by: Harshitha Onkar <honkar@openjdk.org>
Co-authored-by: Joe Wang <joehw@openjdk.org>
Co-authored-by: Jorn Vernee <jvernee@openjdk.org>
Co-authored-by: Justin Lu <jlu@openjdk.org>
Co-authored-by: Kevin Walls <kevinw@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Naoto Sato <naoto@openjdk.org>
Co-authored-by: Roger Riggs <rriggs@openjdk.org>
Co-authored-by: Brent Christian <bchristi@openjdk.org>
Co-authored-by: Stuart Marks <smarks@openjdk.org>
Co-authored-by: Ian Graves <igraves@openjdk.org>
Co-authored-by: Phil Race <prr@openjdk.org>
Co-authored-by: Erik Gahlin <egahlin@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Reviewed-by: kevinw, aivanov, rriggs, lancea, coffeys, dfuchs, ihse, erikj, cjplummer, coleenp, naoto, mchung, prr, weijun, joehw, azvegint, psadhukhan, bchristi, sundar, attila
2024-11-12 17:16:15 +00:00
Sonia Zaldana Calles
8a2a75e56d 8339892: Several security shell tests don't set TESTJAVAOPTS
Reviewed-by: valeriep
2024-11-12 13:19:06 +00:00
Artur Barashev
8b4749713c 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server
Reviewed-by: wetmore, djelinski, xuelei
2024-11-04 18:46:38 +00:00
Fernando Guallini
ae82cc1ba1 8342188: Update tests to use stronger key parameters and certificates
Reviewed-by: rhalade, ascarpino
2024-10-31 18:28:52 +00:00
Matthew Donovan
9a9ac1d005 8341927: Replace hardcoded security providers with new test.provider.name system property
Reviewed-by: mullan, ascarpino, rhalade
2024-10-30 18:51:02 +00:00
Jamil Nimeh
b6e72ff971 8339403: sun.security.ssl.StatusResponseManager.get swallows interrupt status
Reviewed-by: valeriep
2024-10-03 17:16:31 +00:00
Rajan Halade
f554c3ffce 8341059: Change Entrust TLS distrust date to November 12, 2024
Reviewed-by: mullan
2024-09-27 17:16:13 +00:00
Fernando Guallini
95d3e9d199 8339560: Unaddressed comments during code review of JDK-8337664
Reviewed-by: mullan
2024-09-26 13:20:14 +00:00
Mark Powers
bbb516163d 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs
Reviewed-by: mullan, rhalade
2024-09-03 19:55:58 +00:00
Anthony Scarpino
0c2b175898 8328608: Multiple NewSessionTicket support for TLS
Reviewed-by: djelinski
2024-08-28 17:24:33 +00:00
Daniel Fuchs
6a35311468 8241550: [macOS] SSLSocketImpl/ReuseAddr.java failed due to "BindException: Address already in use"
Reviewed-by: jpai, mullan
2024-05-24 12:42:16 +00:00
Mark Powers
da9c23ace9 8325384: sun/security/ssl/SSLSessionImpl/ResumptionUpdateBoundValues.java failing intermittently when main thread is a virtual thread
Reviewed-by: ssahoo, ascarpino
2024-05-16 17:07:19 +00:00
Anthony Scarpino
f62b5789ad 8311644: Server should not send bad_certificate alert when the client does not send any certificates
Reviewed-by: djelinski, jjiang, ssahoo
2024-02-26 16:49:01 +00:00
Stefan Karlsson
cbe329b90a 8321713: Harmonize executeTestJvm with create[Limited]TestJavaProcessBuilder
Reviewed-by: lkorinth, lmesnik
2024-01-03 08:53:01 +00:00
Kevin Driver
1696603ccd 8308453: Convert JKS test keystores in test/jdk/javax/net/ssl/etc to PKCS12
Reviewed-by: weijun
2023-11-06 15:07:03 +00:00
Leo Korinth
d52a995f35 8315097: Rename createJavaProcessBuilder
Reviewed-by: lmesnik, dholmes, rriggs, stefank
2023-10-27 08:47:26 +00:00
Daniel Jeliński
fee9d3362c 8293176: SSLEngine handshaker does not send an alert after a bad parameters
Reviewed-by: mdonovan, jnimeh
2023-09-27 07:33:52 +00:00
Matthias Baesken
1f7dfda705 8316671: sun/security/ssl/SSLSocketImpl/SSLSocketCloseHang.java test fails intermittent with Read timed out
Reviewed-by: lucy
2023-09-26 14:01:45 +00:00
Sean Mullan
c698b45a7b 8313229: DHEKeySizing.java should be modified to use TLS versions TLSv1, TLSv1.1, TLSv1.2
Reviewed-by: jnimeh
2023-09-21 17:31:46 +00:00
Erik Joelsson
020255a72d 8267174: Many test files have the wrong Copyright header
Reviewed-by: valeriep, aivanov, iris, dholmes, ihse
2023-09-12 20:16:05 +00:00
Xue-Lei Andrew Fan
79be8d9383 8312259: StatusResponseManager unused code clean up
Reviewed-by: mpowers, jnimeh
2023-08-10 17:15:56 +00:00
Matthew Donovan
8042a50b99 8309305: sun/security/ssl/SSLSocketImpl/BlockedAsyncClose.java fails with jtreg test timeout
Reviewed-by: djelinski
2023-07-21 14:45:59 +00:00
Jamil Nimeh
282a93a4cc 8300285: Enhance TLS data handling
Reviewed-by: ahgross, ascarpino, rhalade
2023-07-18 21:17:06 +00:00
Kevin Driver
80edd5c298 8294985: SSLEngine throws IAE during parsing of X500Principal
Reviewed-by: wetmore, xuelei, mullan
2023-06-09 23:31:12 +00:00
Matthew Donovan
5842fd5beb 8306015: Update sun.security.ssl TLS tests to use SSLContextTemplate or SSLEngineTemplate
Reviewed-by: xuelei
2023-05-09 14:25:40 +00:00
Matthew Donovan
39398075b7 8182621: JSSE should reject empty TLS plaintexts
Reviewed-by: xuelei
2023-04-11 04:21:17 +00:00
Matthew Donovan
824a5e4c60 8284047: Harmonize/Standardize the SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
Reviewed-by: rhalade
2023-03-15 17:39:11 +00:00
Pavel Rappo
45a616a891 8303480: Miscellaneous fixes to mostly invisible doc comments
Reviewed-by: mullan, prr, cjplummer, aivanov, jjg, lancea, rriggs, ihse
2023-03-07 15:31:42 +00:00
Sean Mullan
26b111d714 8301700: Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
Reviewed-by: xuelei
2023-02-15 13:25:50 +00:00
Jamil Nimeh
1a3cb8c501 8296343: CPVE thrown on missing content-length in OCSP response
Reviewed-by: mullan, rhalade
2023-01-23 18:05:48 +00:00
Matthias Baesken
d490f15e3b 8235297: sun/security/ssl/SSLSessionImpl/ResumptionUpdateBoundValues.java fails intermittent
Reviewed-by: xuelei
2022-12-28 08:28:02 +00:00
Weijun Wang
671f84bd86 8296143: CertAttrSet's set/get mechanism is not type-safe
Reviewed-by: mullan
2022-11-08 22:35:29 +00:00
Sean Mullan
16744b3449 8256660: Disable DTLS 1.0
Reviewed-by: xuelei, hchao, wetmore
2022-10-31 16:46:40 +00:00
Magnus Ihse Bursie
d5a1521fde 8295470: Update openjdk.java.net => openjdk.org URLs in test code
Reviewed-by: michaelm, prr, darcy
2022-10-20 10:33:18 +00:00
Daniel Jeliński
d1252653b0 8277970: Test jdk/sun/security/ssl/SSLSessionImpl/NoInvalidateSocketException.java fails with "tag mismatch"
Reviewed-by: jnimeh, xuelei
2022-10-12 15:32:36 +00:00
Weijun Wang
986b834148 8293489: Accept CAs with BasicConstraints without pathLenConstraint
Reviewed-by: mullan
2022-09-08 01:35:22 +00:00
Kevin Driver
2adef6a1f8 8267860: Off-by-one bug when searching arrays in AlpnGreaseTest
Co-authored-by: Bradford Wetmore <wetmore@openjdk.org>
Reviewed-by: wetmore
2022-06-13 14:38:36 +00:00
Rajan Halade
5b7d066ca5 8287109: Distrust.java failed with CertificateExpiredException
Reviewed-by: mullan
2022-05-23 20:32:52 +00:00
Anthony Scarpino
f17c68ce4a 8283577: SSLEngine.unwrap on read-only input ByteBuffer
Reviewed-by: wetmore
2022-05-17 21:39:11 +00:00
Mahendra Chhipa
ec73c61d8f 8284353: Update java/net and sun/net/www tests to eliminate dependency on sun.net.www.MessageHeader
Reviewed-by: dfuchs
2022-04-07 10:19:12 +00:00
Bradford Wetmore
0b09f70a73 8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368
Reviewed-by: xuelei, rhalade, coffeys
2022-04-02 00:30:48 +00:00
Sean Mullan
138460c004 8163327: Remove 3DES from the default enabled cipher suites list
Reviewed-by: xuelei
2022-03-23 18:32:55 +00:00
Mahendra Chhipa
95ca94436d 8282354: Remove dependancy of TestHttpServer, HttpTransaction, HttpCallback from open/test/jdk/ tests
Reviewed-by: dfuchs
2022-03-11 10:48:57 +00:00
Alexey Bakhtin
58dae60da0 8274524: SSLSocket.close() hangs if it is called during the ssl handshake
Reviewed-by: xuelei
2022-02-12 11:54:22 +00:00
Sergey Bylokhov
7fea10327e 8279134: Fix Amazon copyright in various files
Reviewed-by: xliu, phh
2021-12-26 22:10:54 +00:00
Daniel Jelinski
f31dead6c5 8279043: Some Security Exception Messages Miss Spaces
Reviewed-by: weijun
2021-12-21 18:24:31 +00:00
Weijun Wang
6412d57a0a 8278560: X509KeyManagerImpl::getAliases might return a good key with others
Reviewed-by: xuelei
2021-12-17 12:14:17 +00:00
Jamil Nimeh
8822d41fdc 8274736: Concurrent read/close of SSLSockets causes SSLSessions to be invalidated unnecessarily
Reviewed-by: xuelei, wetmore
2021-11-10 01:24:33 +00:00
Sean Mullan
49f9d8031e 8243585: AlgorithmChecker::check throws confusing exception when it rejects the signer key
Reviewed-by: ascarpino
2021-10-21 17:28:40 +00:00