210 Commits

Author SHA1 Message Date
Weijun Wang
bda0fba56b 8229951: Better Ticket Granting Services
Reviewed-by: ahgross, valeriep
2019-09-26 18:12:53 +08:00
Sean Mullan
6cb8dfa9e3 8227758: More valid PKIX processing
Reviewed-by: xuelei, rhalade, coffeys, mschoene
2019-08-26 13:57:51 -04:00
Weijun Wang
2215201dd5 8226352: Improve Kerberos interop capabilities
Reviewed-by: ahgross, mullan, valeriep
2019-07-19 14:51:04 +08:00
Sibabrata Sahoo
58cce5fbf4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-13 01:43:14 -08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
2019-12-09 21:38:12 -08:00
Weijun Wang
bc19b64856 8234744: KeyStore.store can write wrong type of file
Reviewed-by: mullan
2019-12-03 14:38:18 +08:00
Rajan Halade
17c2f4808a 8233223: Add Amazon Root CA certificates
Reviewed-by: mullan
2019-11-28 10:43:35 -08:00
Sibabrata Sahoo
f97eccfdc9 8234725: sun/security/ssl/SSLContextImpl tests support TLSv1.3
Missing TLSv1.3 test cases

Reviewed-by: xuelei
2019-11-27 22:11:08 -08:00
Weijun Wang
8c6eb44946 8026393: jarsigner never shows a warning in badKeyUsage case
Reviewed-by: mullan
2019-11-22 09:33:03 +08:00
Weijun Wang
d5b423d17c 8234377: new BitArray(0).toString() throws ArrayIndexOutOfBoundsException
Reviewed-by: mullan, wetmore
2019-11-20 08:12:14 +08:00
Jie Fu
25d178f477 8234245: sun/security/lib/cacerts/VerifyCACerts.java fails due to wrong checksum
Reviewed-by: mullan
2019-11-15 19:38:31 +08:00
Rajan Halade
d1ebadb966 8232019: Add LuxTrust certificate updates to the existing root program
Reviewed-by: mullan
2019-11-14 19:49:55 -08:00
Weijun Wang
c0d097eac6 8214024: Remove the default keytool -keyalg value
Reviewed-by: mullan
2019-11-15 09:06:58 +08:00
Weijun Wang
a66829bc89 8231950: keytool -ext camel-case shorthand not working
Reviewed-by: mullan
2019-11-04 14:26:18 +08:00
Weijun Wang
055a49a266 8228969: 2019-09-28 public suffix list update
Reviewed-by: mullan
2019-10-29 09:34:21 +08:00
Weijun Wang
72330c70d7 8231598: keytool does not export sun.security.mscapi
Reviewed-by: mullan
2019-10-24 15:53:20 +08:00
Henry Jen
8d141f1048 Merge 2019-10-14 21:01:25 +00:00
Valerie Peng
381e90eb6b 8229243: SunPKCS11-Solaris provider tests failing on Solaris 11.4
For CK_GCM_PARAMS, try the spec definition first before falling back to the header file definition

Reviewed-by: xuelei
2019-10-08 00:01:20 +00:00
Matthias Baesken
09c012be4e 8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14
Reviewed-by: clanger, valeriep
2019-09-26 13:51:43 +02:00
John Jiang
0a0956bcda 8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
Reviewed-by: xuelei
2019-09-21 08:06:00 +08:00
John Jiang
655cf14138 8228967: Trust/Key store and SSL context utilities for tests
Reviewed-by: xuelei
2019-09-05 14:55:21 +08:00
John Jiang
dfe4ba5045 8226221: Update PKCS11 tests to use NSS 3.46 libs
Reviewed-by: xuelei
2019-09-04 12:47:42 +08:00
Jamil Nimeh
d096e033d0 8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
Reviewed-by: mullan
2019-08-22 14:09:36 -07:00
Weijun Wang
b84ffae32f 8229775: Incorrect warning when jar was signed with -sectionsonly
Reviewed-by: mullan
2019-08-16 08:42:09 +08:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
2019-08-12 21:36:29 -07:00
Mikael Vidstedt
895db11053 Merge 2019-07-29 09:59:04 -07:00
John Jiang
804e840856 8228403: SignTwice.java failed with java.io.FileNotFoundException: File name too long
Reviewed-by: mullan
2019-07-27 10:02:35 +08:00
Sean Coffey
bb3d5aed04 8228645: Don't run sun/security/pkcs11/Cipher/TestKATForGCM.java on buggy NSS solaris versions
Reviewed-by: valeriep
2019-07-29 08:17:26 +00:00
Weijun Wang
78c7364c17 8228341: SignTwice.java fails intermittently on Windows
Reviewed-by: mullan
2019-07-24 10:09:30 +08:00
Weijun Wang
9c12b7f41d 8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
Reviewed-by: mullan
2019-07-24 10:09:22 +08:00
Mikael Vidstedt
f73a94a772 Merge 2019-07-23 11:17:59 -07:00
Xiaohong Gong
2c6a826899 8227615: [TESTBUG] JTReg "jdk/sun/security/util/FilePermCompat/CompatImpact.java" fails with graal
Reviewed-by: kvn
2019-07-17 10:11:05 +08:00
Valerie Peng
175faeeadf 8225745: NoSuchAlgorithmException exception for SHA256withECDSA with RSASSA-PSS support
Fixed SignatureUtil and ECDSA signature impl to handle EC parameters

Reviewed-by: weijun
2019-07-11 20:11:47 +00:00
Weijun Wang
32d0bae08d 8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out
Reviewed-by: xuelei
2019-07-10 09:43:35 +08:00
Philipp Kunz
b6d1b1e085 8217375: jarsigner breaks old signature with long lines in manifest
Reviewed-by: jjiang, weijun
2019-07-18 08:53:06 +08:00
Martin Balao
3cd50f2666 8227437: S4U2proxy cannot continue because server's TGT cannot be found
Reviewed-by: weijun
2019-07-17 12:26:56 -03:00
Anthony Scarpino
200254b479 8226338: Updates to Stateless Resumption
Reviewed-by: xuelei, jnimeh
2019-07-17 14:37:50 -07:00
Weijun Wang
c0fddce0f5 8227061: KDC.java test behaves incorrectly when AS-REQ contains a PAData not PA-ENC-TS-ENC
Reviewed-by: mullan
2019-07-04 07:25:11 +08:00
Valerie Peng
1e0c8e5b26 8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no effect
Fixed to get the MGF digest algorithm from MGF1ParameterSpec

Reviewed-by: xuelei
2019-06-28 19:36:32 +00:00
John Jiang
df6fbdb2af 8224650: Add tests to support X25519 and X448 in TLS
Reviewed-by: xuelei
2019-06-28 05:29:54 +08:00
Weijun Wang
a2b3db108a 8225257: sun/security/tools/keytool/PSS.java timed out
Reviewed-by: valeriep
2019-06-21 23:44:58 +08:00
Xue-Lei Andrew Fan
dbf62785ef 8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
Reviewed-by: ascarpino
2019-06-19 21:49:33 -07:00
Weijun Wang
c12cf04011 8225392: Comparison builds are failing due to cacerts file
Reviewed-by: erikj, martin, mullan
2019-06-15 14:39:04 +08:00
Xue-Lei Andrew Fan
a4277e56c8 8224829: AsyncSSLSocketClose.java has timing issue
Reviewed-by: jnimeh, dfuchs
2019-06-14 12:19:14 -07:00
Weijun Wang
977870ccea 8225180: SignedObject with invalid Key not throwing the InvalidKeyException in Windows
Reviewed-by: mullan
2019-06-13 23:53:21 +08:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS
Reviewed-by: xuelei, mullan
2019-06-12 18:58:00 -07:00
Anthony Scarpino
94e1d7530f 8211018: Session Resumption without Server-Side State
Reviewed-by: xuelei, jnimeh, jjiang
2019-06-11 16:31:37 -07:00
Valerie Peng
8813b93095 8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
Added support for GCM, PSS, and other mechanisms

Reviewed-by: jnimeh
2019-06-11 21:30:28 +00:00
Philipp Kunz
6d3f5f851e 8221719: Jarsigner fails to verify signed by alias if alias given in wrong case
Reviewed-by: weijun
2019-06-10 20:38:15 +08:00
Martin Balao
5aae9ef0db 8215032: Support Kerberos cross-realm referrals (RFC 6806)
Reviewed-by: weijun
2019-06-05 01:42:11 -03:00