stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
41,717 Commits 2 Branches 0 Tags 1.2 GiB
b8904d34fe
Commit Graph

187 Commits

Author SHA1 Message Date
Iris Clark
8db18e0442 Merge 2015-08-17 13:02:48 -07:00
Jamil Nimeh
e7f31340a0 8046321: OCSP Stapling for TLS 
Initial feature commit for OCSP stapling in JSSE

Reviewed-by: xuelei, mullan
 2015-08-05 12:19:38 -07:00
Iris Clark
959eee3901 Merge 2015-08-03 09:26:18 -07:00
Vinnie Ryan
c1cd222df9 8130850: Support loading a keystore with a custom KeyStore.LoadStoreParameter class 
Reviewed-by: mullan
 2015-07-31 14:29:25 +01:00
Iris Clark
636d3c2d95 Merge 2015-07-23 13:19:54 -07:00
Iris Clark
3542628ec7 8130696: Security Providers need to have their version numbers updated for JDK 9 
Reviewed-by: ascarpino, mullan, valeriep, weijun, wetmore
 2015-07-20 09:40:49 -07:00
Sean Mullan
981dbca21a 8131486: SecureClassLoader key for ProtectionDomain cache also needs to take into account certificates 
Reviewed-by: weijun
 2015-07-20 09:03:03 -04:00
Vinnie Ryan
44db4a2bcb 8131359: Correct the JTREG tags in java/security/KeyStore/PKCS12/MetadataStoreLoadTest.java test 
Reviewed-by: mullan
 2015-07-15 18:42:12 +01:00
Bhanu Prakash Gopularam
13a6fbe6c0 8048830: Implement tests for new functionality provided in JEP 166 
Reviewed-by: vinnie
 2015-07-15 15:07:58 +01:00
Paul Sandoz
e56c76e9f7 8081678: Add Stream returning methods to classes where there currently exist only Enumeration returning methods 
Reviewed-by: lancea, alanb, chegar, dfuchs, mullan, smarks
 2015-06-09 07:10:02 +01:00
Mandy Chung
1465e16631 8130007: Update security tests to use Security.getProvider to get security provider 
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Reviewed-by: mullan
 2015-06-29 11:38:36 -07:00
Valerie Peng
5109058c5d 7191662: JCE providers should be located via ServiceLoader 
Enhanced to use ServiceLoader and switched provider to Provider.Service model.

Reviewed-by: mullan, alanb, mchung
 2015-06-26 21:34:34 +00:00
Valerie Peng
f3ff947746 8087157: PKCS11 provider not instantiated with security manager 
Updated java.policy file with sun.misc pkg access permission for SunPKCS11 provider.

Reviewed-by: mullan
 2015-06-25 17:53:52 +00:00
Sean Mullan
0338c81dbd 6826789: SecureClassLoader should not use CodeSource URLs as HashMap keys 
Reviewed-by: weijun
 2015-06-12 12:50:41 -04:00
Sean Mullan
e37ef5fefc 8056179: Store permissions in concurrent collections in PermissionCollection subclasses 
8065942: Store PermissionCollection entries in a ConcurrentHashMap instead of a HashMap in Permissions class

Reviewed-by: weijun
 2015-06-09 09:18:07 -04:00
Mandy Chung
53a97cbeb3 8081347: Add @modules to jdk_core tests 
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Alan Bateman <alan.bateman@oracle.com>
Reviewed-by: alanb, joehw, lancea
 2015-05-28 10:54:48 -07:00
Artem Smotrakov
6b7bbd4884 8050374: More Signature tests 
Reviewed-by: valeriep
 2015-05-25 11:47:41 +03:00
Vinnie Ryan
6deb69ac50 8072578: ProbeKeystores.java creates files in test.src 
Reviewed-by: weijun
 2015-05-21 17:42:15 +01:00
Valerie Peng
d296137c20 8038084: CertStore needs a way to add new CertStore types 
Removed internal helper classes and reflection usage for LDAP CertStore.

Reviewed-by: mullan
 2015-05-15 01:14:25 +00:00
Sean Mullan
5dbc7756f6 8075706: Policy implementation does not allow policy.provider to be on the class path 
Reviewed-by: alanb, mchung
 2015-05-12 13:13:06 -04:00
Joe Darcy
86c109e149 8078334: Mark regression tests using randomness 
Reviewed-by: xuelei, alanb
 2015-04-29 10:25:53 -07:00
Zaiyao Liu
35c411ea7e 8048618: Tests for PKCS12 write operations 
Reviewed-by: weijun
 2015-03-23 15:37:03 +08:00
Zaiyao Liu
7b95618234 8050371: More MessageDigest tests 
Reviewed-by: xuelei
 2015-03-04 08:10:23 +00:00
Amanda Jiang
a1f3c2d2fe 8048360: Test signed jar files 
Reviewed-by: weijun
 2015-03-04 10:12:25 +08:00
Jaroslav Bachorik
b5ac4fe904 8064331: JavaSecurityAccess.doIntersectionPrivilege() drops the information about the domain combiner of the stack ACC 
Reviewed-by: mullan
 2015-01-16 18:19:23 +01:00
Vinnie Ryan
befd7d1c25 8044445: JEP 229: Create PKCS12 Keystores by Default 
Reviewed-by: mullan, weijun
 2014-12-23 16:30:57 +00:00
Zaiyao Liu
bf31fc249e 8048619: Implement tests for converting PKCS12 keystores 
Reviewed-by: weijun
 2014-12-04 16:50:31 +08:00
Chris Hegarty
441905cdc7 8049367: Modular Run-Time Images 
Co-authored-by: Alan Bateman <alan.bateman@oracle.com>
Co-authored-by: Alex Buckley <alex.buckley@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com>
Co-authored-by: James Laskey <james.laskey@oracle.com>
Co-authored-by: Jonathan Gibbons <jonathan.gibbons@oracle.com>
Co-authored-by: Karen Kinnear <karen.kinnear@oracle.com>
Co-authored-by: Magnus Ihse Bursie <magnus.ihse.bursie@oracle.com>
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Paul Sandoz <paul.sandoz@oracle.com>
Co-authored-by: Sundararajan Athijegannathan <sundararajan.athijegannathan@oracle.com>
Reviewed-by: chegar, dfuchs, ihse, joehw, mullan, psandoz, wetmore
 2014-12-03 14:22:58 +00:00
Mandy Chung
a76f56165c 8043277: Update jdk regression tests to extend the default security policy instead of override 
Reviewed-by: alanb, mullan, chegar, sla
 2014-10-27 13:45:39 -07:00
Jamil Nimeh
823f5f273e 8032573: CertificateFactory.getInstance("X.509").generateCertificates(InputStream) does not throw CertificateException for invalid input 
Reviewed-by: weijun
 2014-10-15 11:43:27 -07:00
Jason Uh
1f56f49cd0 8047223: Add algorithm parameter to EncodedKeySpec class and its two subclasses 
Reviewed-by: mullan
 2014-09-16 13:20:51 -07:00
Amanda Jiang
746ed2b4eb 8050281: New permission tests for JEP 140 
Reviewed-by: mullan
 2014-09-18 15:36:38 -04:00
Zaiyao Liu
0fdc2863c1 8048621: Implement basic keystore tests 
Reviewed-by: xuelei
 2014-09-03 06:57:40 +00:00
Raghu Nair
259c3ec2e9 8048362: Tests for doPrivileged with accomplice 
Reviewed-by: vinnie
 2014-09-03 02:11:16 +00:00
Zaiyao Liu
ee35cf6516 8048617: Tests for PKCS12 read operations 
Reviewed-by: weijun
 2014-08-27 11:33:45 +08:00
Zaiyao Liu
f34547460c 8050370: Need new regressions tests for messageDigest with DigestIOStream 
Reviewed-by: weijun
 2014-08-26 15:10:29 +08:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible 
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
 2014-07-10 22:44:58 +00:00
Weijun Wang
fa14289859 8040769: add a comment to the NewInstance test 
Reviewed-by: wetmore
 2014-04-17 09:48:21 +08:00
Weijun Wang
ce428ecfec 8039853: Provider.Service.newInstance() does not work with current JDK JGSS Mechanisms 
Reviewed-by: mullan
 2014-04-16 10:39:36 +08:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual 
Reviewed-by: xuelei, wetmore
 2014-03-18 15:04:59 -07:00
Artem Smotrakov
727989dc5d 8028591: NegativeArraySizeException in sun.security.util.DerInputStream.getUnalignedBitString() 
Reviewed-by: mullan, weijun
 2014-03-13 15:13:22 +08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013 
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
 2013-12-26 12:04:16 -08:00
Sean Mullan
7699817903 8025708: Certificate Path Building problem with AKI serial number 
Reviewed-by: xuelei, juh
 2014-02-17 11:36:40 -05:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Vladimir Kozlov
9c83896027 Merge 2014-01-22 14:17:32 -08:00
Artem Smotrakov
f85948cc0c 8028431: NullPointerException in DerValue.equals(DerValue) 
Reviewed-by: mullan
 2014-01-21 16:54:26 -05:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX 
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
 2014-01-17 21:54:30 +01:00
Anthony Scarpino
aa8188c26b 8030823: Security Providers need to have their version numbers updated for JDK9 
Reviewed-by: xuelei, wetmore
 2014-01-07 14:35:57 -08:00
Joe Darcy
48ce9464b0 8031651: Remove unneeded -source and -target flags in jdk repo regression tests 
Reviewed-by: dfuchs, mullan
 2014-01-14 10:08:24 -08:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property 
Reviewed-by: mullan, weijun
 2014-01-13 21:12:58 -08:00
Sergey Bylokhov
9ab430a0d2 8027696: Incorrect copyright header in the tests 
Reviewed-by: alanb, malenkov, mullan
 2013-11-12 20:24:25 +04:00
Bradford Wetmore
1b03814ab7 8027526: CheckTipsAndVersions.java failing occasionally 
Reviewed-by: mullan, mchung
 2013-10-30 16:49:35 -07:00
Jason Uh
c6ac4eb557 8025287: NPE in api/java_security/cert/PKIXRevocationChecker/GeneralTests_GeneralTests 
Reviewed-by: mullan
 2013-10-22 11:57:38 -07:00
Anthony Scarpino
bae7582243 7122707: Security Providers need to have their version numbers updated for JDK8 
Reviewed-by: xuelei
 2013-09-19 11:59:14 -07:00
Sean Mullan
23d61e9b45 8023362: Don't allow soft-fail behavior if OCSP responder returns "unauthorized" 
Reviewed-by: vinnie, xuelei
 2013-09-06 12:04:18 -04:00
Sean Mullan
7474815db8 Merge 2013-08-02 08:37:25 -04:00
Sean Mullan
0844d3e77b 8001319: Add SecurityPermission "insertProvider" target name 
Reviewed-by: vinnie
 2013-08-02 08:30:46 -04:00
Sean Mullan
5c30826657 Merge 2013-07-25 11:09:28 -04:00
Sean Mullan
74a0cc9f37 8010748: Add PKIXRevocationChecker NO_FALLBACK option and improve SOFT_FAIL option 
Reviewed-by: vinnie
 2013-07-25 10:58:00 -04:00
Vinnie Ryan
3300eed0bb 8019627: RuntimeException gets obscured during OCSP cert revocation checking 
Reviewed-by: mullan
 2013-07-12 20:44:34 +01:00
Vinnie Ryan
53ecefacac 8019259: Failover to CRL checking does not happen if wrong OCSP responder URL is set 
Reviewed-by: xuelei
 2013-07-01 14:39:47 +01:00
Weijun Wang
af996219c7 8001326: Improve Kerberos caching 
Reviewed-by: valeriep
 2013-06-21 18:26:13 +08:00
Deven You
c778d84388 8014620: Signature.getAlgorithm return null in special case 
Reviewed-by: wetmore
 2013-06-17 17:36:20 -07:00
Jeff Nisewanger
c0c2397857 8014097: add doPrivileged methods with limited privilege scope 
Reviewed-by: mchung
 2013-06-04 15:33:42 -07:00
David Holmes
390cc1d7a1 Merge 2013-02-17 16:44:19 -05:00
Vinnie Ryan
3d55cc1e02 8007934: algorithm parameters for PBE Scheme 2 not decoded correctly in PKCS12 keystore 
Reviewed-by: mullan
 2013-02-13 16:01:26 +00:00
David Holmes
eb1726c151 Merge 2013-02-04 18:08:50 -05:00
Vinnie Ryan
ddbfa5fe53 8006994: Cleanup PKCS12 tests to ensure streams get closed 
Reviewed-by: mullan
 2013-02-04 17:20:26 +00:00
Vinnie Ryan
3727e751f6 8006855: PKCS12 test failures due to unsupported algorithm 
Reviewed-by: mullan
 2013-01-24 16:44:15 +00:00
Vinnie Ryan
7dcd0b38a8 8006591: Protect keystore entries using stronger PBE algorithms 
Reviewed-by: mullan
 2013-01-23 21:25:49 +00:00
Alan Bateman
a23a1a942b 8004502: Compact Profiles contents 
Reviewed-by: dholmes, mchung
 2013-01-21 23:35:36 -05:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools 
Reviewed-by: chegar
 2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697 Merge 2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815 Merge 2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac 7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator 
Add new java.security.Principal.implies method

Reviewed-by: alanb
 2013-01-08 19:00:12 -05:00
Lana Steuck
b7af263526 Merge 2012-12-28 18:36:41 -08:00
Xue-Lei Andrew Fan
6d41a58c82 7109274: Restrict the use of certificates with RSA keys less than 1024 bits 
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.

Reviewed-by: mullan
 2012-12-28 00:48:12 -08:00
David Katleman
306cab1006 8004982: JDK8 source with GPL header errors 
Reviewed-by: ohair
 2012-12-20 16:24:50 -08:00
Mark Sheppard
c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS 
Reviewed-by: chegar, alanb
 2012-12-13 14:47:35 +00:00
Sean Mullan
3f59d3882d Merge 2012-11-26 08:23:20 -05:00
Sean Mullan
c9b91fa45a 7167056: Clarify that BasicPermission names that contain non-wildcard asterisks are not invalid 
Reviewed-by: weijun, xuelei
 2012-11-26 08:12:19 -05:00
Sean Mullan
4e6425e134 Merge 2012-11-05 12:08:04 -05:00
Sean Mullan
5b23307a8f 7171570: JEP 124 Potential API Changes 
Reviewed-by: vinnie, xuelei
 2012-11-05 10:30:49 -05:00
Alan Bateman
430592a30e 7197491: update copyright year to match last edit in jdk8 jdk repository 
Reviewed-by: chegar, ksrini
 2012-11-02 15:50:11 +00:00
Sean Mullan
6ad27831e0 7176326: CertPath/CertPathBuilderTest failures after webrev 6854712_6637288_7126011 
Reviewed-by: xuelei
 2012-06-15 08:43:31 -04:00
Jonathan Lu
775655b44a 7172149: ArrayIndexOutOfBoundsException from Signature.verify 
Take care of integer addition overflow

Reviewed-by: xuelei, wetmore
 2012-06-06 18:39:09 -07:00
Sean Mullan
63e39d6ee7 Merge 2012-05-31 17:07:28 -04:00
Sean Mullan
14c586557e 6854712: Revocation checking enhancements (JEP-124) 
6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE

Reviewed-by: xuelei
 2012-05-30 17:19:46 -04:00
Sean Mullan
ac620e811d 7152564: Improve CodeSource.matchLocation(CodeSource) performance 
7155693: CodeSource.matchLocation getPort test can be improved

Reviewed-by: chegar
 2012-04-13 09:46:25 -04:00
Alan Bateman
3269d85838 7113349: Initial changeset for Macosx port to jdk 
Co-authored-by: Alexander Potochkin <alexander.potochkin@oracle.com>
Co-authored-by: Alexander Zuev <alexander.zuev@oracle.com>
Co-authored-by: Andrew Brygin <andrew.brygin@oracle.com>
Co-authored-by: Artem Ananiev <artem.ananiev@oracle.com>
Co-authored-by: Alex Strange <astrange@apple.com>
Co-authored-by: Bino George <bino@apple.com>
Co-authored-by: Christine Lu <christine.lu@oracle.com>
Co-authored-by: David Katleman <david.katleman@oracle.com>
Co-authored-by: David Durrence <david_durrence@apple.com>
Co-authored-by: Dmitry Cherepanov <dmitry.cherepanov@oracle.com>
Co-authored-by: Greg Lewis <glewis@eyesbeyond.com>
Co-authored-by: Kevin Miller <kevin_m_miller@apple.com>
Co-authored-by: Kurt Miller <kurt@intricatesoftware.com>
Co-authored-by: Landon Fuller <landonf@plausiblelabs.com>
Co-authored-by: Leonid Romanov <leonid.romanov@oracle.com>
Co-authored-by: Loefty Walkowiak <loefty@apple.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Roger Hoover <rhoover@apple.com>
Co-authored-by: Scott Kovatch <scott.kovatch@oracle.com>
Co-authored-by: Sergey ByloKhov <sergey.bylokhov@oracle.com>
Co-authored-by: Mike Swingler <swingler@apple.com>
Co-authored-by: Tomas Hurka <tomas.hurka@oracle.com>
Reviewed-by: jjh, alanb, dholmes, anthony, ohrstrom, ksrini, jrose, weijun, smarks
 2012-03-06 20:34:38 +00:00
Valerie Peng
eafb7ad68c 7088989: Improve the performance for T4 by utilizing the newly provided crypto APIs 
Added the OracleUcrypto provider for utilizing the Solaris ucrypto API.

Reviewed-by: weijun
 2012-01-12 16:04:03 -08:00
Weijun Wang
b0fb95c8d3 7081411: DSA keypair generation affected by Solaris bug 
Reviewed-by: xuelei, mullan, alanb
 2011-09-05 18:17:55 +08:00
Weijun Wang
610c9dd4e3 7055363: jdk_security3 test target cleanup 
Reviewed-by: alanb, xuelei
 2011-08-12 12:26:31 +08:00
Lana Steuck
69ce407621 Merge 2011-06-22 23:23:58 -07:00
Weijun Wang
700f4e1951 7054918: jdk_security1 test target cleanup 
Reviewed-by: alanb, smarks, vinnie
 2011-06-20 19:17:47 +08:00
Weijun Wang
8bdce645f3 7054428: test/java/security/SecureClassLoader/DefineClassByteBuffer.java error 
Reviewed-by: alanb
 2011-06-20 17:38:15 +08:00
Bradford Wetmore
33be52be86 7052537: java/security/Security/NotInstalledProviders.java is causing -samevm tests to fail 
Reviewed-by: valeriep, asaha, alanb
 2011-06-09 14:24:09 -07:00
Lana Steuck
4ce35dcaa5 Merge 2011-06-06 19:04:30 -07:00
Sean Mullan
998c791227 7050329: test/java/security/Policy/GetPermissions/JarURL.java fails on Windows 
Reviewed-by: alanb
 2011-06-04 06:45:17 -07:00
Abhijit Saha
cfdb3ec24b Merge 2011-05-26 21:37:40 -07:00