170 Commits

Author SHA1 Message Date
Mikael Vidstedt
95db6924f2 Merge 2018-08-20 14:19:30 -07:00
Xue-Lei Andrew Fan
611c53c860 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 18:16:47 -07:00
Mikael Vidstedt
83a51d869e Merge 2018-08-09 10:08:07 -07:00
Weijun Wang
b9bfd45c73 8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer
Reviewed-by: xuelei
2018-08-01 13:35:08 +08:00
Phil Race
1387c87093 Merge 2018-07-26 10:00:40 -07:00
Phil Race
28e828130d Merge 2018-07-19 10:17:22 -07:00
Jesper Wilhelmsson
4fc510cc89 Merge 2018-07-14 02:14:54 +02:00
Adam Petcher
b2f4d61fb9 8206915: XDH TCK issues
Fixing a couple of conformance issues in XDH

Reviewed-by: mullan
2018-07-13 10:42:30 -04:00
John Jiang
5074bbb767 8206443: Update security libs manual test to cope with removal of javac -source/-target 6
Change compile -source/-target from 1.6 to 1.7

Reviewed-by: xuelei
2018-07-14 07:31:26 +08:00
Dan Zhou
9519826624 8194152: sun/security/tools/jarsigner/AltProvider.java failed on de-DE locale
Reviewed-by: naoto
2018-06-25 20:08:05 -07:00
Dan Zhou
90329292ce 8196213: sun/security/tools/jarsigner/warnings/NoTimestampTest.java test fails on ar_SA locale
Reviewed-by: naoto
2018-06-25 20:03:46 -07:00
Weijun Wang
230268522b 8202299: Java Keystore fails to load PKCS12/PFX certificates created in WindowsServer2016
Reviewed-by: mullan, xuelei
2018-06-26 10:43:50 +08:00
Weijun Wang
3ad65642c8 8202608: CommonSeeder test needs a white-box testing mechanism to replace the default entropy source
Reviewed-by: xuelei
2018-06-26 10:43:43 +08:00
Martin Balao
b44c24d290 8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with "NSS initialization failed" on NSS 3.34.1
Reviewed-by: valeriep, weijun
2018-06-26 08:10:45 +08:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Prasadrao Koppula
b3e5409c1d 8187218: GSSCredential.getRemainingLifetime() returns negative value for TTL > 24 days
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: mullan
2018-03-20 11:16:10 +05:30
Tobias Wagner
5d58391226 7007966: Add Brainpool ECC support (RFC 5639)
Enhance SunEC provider with the support of brainpool256/320/384/512r1 curves

Reviewed-by: valeriep
2018-06-22 23:10:36 +00:00
Weijun Wang
578576f523 8205445: Add RSASSA-PSS Signature support to SunMSCAPI
Reviewed-by: xuelei
2018-06-22 21:42:00 +08:00
Jan Lahoda
78b7362c97 8193302: Javac AssertionError: typeSig ERROR on usage of @Generated
Importing from an invisible package whose name is a prefix of a visible package is not allowed.

Reviewed-by: vromero
2018-06-13 12:52:21 +02:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Weijun Wang
48b5731c39 8201627: Kerberos sequence number issues
Reviewed-by: valeriep
2018-05-19 22:06:47 +08:00
Weijun Wang
b8855ebbc2 8201867: Kerberos keytabs with holes in certain places are parsed incorrectly
Reviewed-by: valeriep
2018-05-18 16:27:15 +08:00
Weijun Wang
8b1470f8e7 8202816: Update JarSigning.keystore
Reviewed-by: xuelei
2018-05-09 09:50:25 +08:00
Adam Petcher
f5a247a85f 8171277: Elliptic Curves for Security in Crypto
Implementations of X25519 and X448 key agreement in SunEC

Reviewed-by: mullan
2018-05-08 09:47:28 -04:00
Adam Petcher
f15ab37909 8181594: Efficient and constant-time modular arithmetic
Field arithmetic library for crypto algorithms like Poly1305 and X25519

Reviewed-by: xuelei
2018-05-08 09:21:51 -04:00
Bhanu Prakash Gopularam
7904b56345 8200101: sun/security/krb5/auto/Renewal.java fails intermittently
Reviewed-by: weijun
2018-04-25 12:44:50 +05:30
Bhanu Prakash Gopularam
a3ed7dd7d6 8144806: sun/security/tools/keytool/standard.sh fails intermittently at deleting x.jks
Reviewed-by: weijun
2018-04-25 12:29:48 +05:30
Weijun Wang
bde972d645 8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
Reviewed-by: xuelei
2018-07-19 00:14:40 +08:00
Weijun Wang
a825fe0a2d 8207250: setUseClientMode post handshake with the same value as before does not throw IAE
Reviewed-by: xuelei
2018-07-19 00:14:29 +08:00
Adam Petcher
108461949f 8206929: Check session context for TLS 1.3 session resumption
Additional checks to prevent TLS 1.3 sessions from being resumed when they shouldn't

Reviewed-by: xuelei
2018-07-17 13:04:40 -04:00
Weijun Wang
0b6fbf50d2 8200468: Port the native GSS-API bridge to Windows
Reviewed-by: ihse, valeriep
2018-04-13 15:29:33 +08:00
Weijun Wang
370977cf4f 8200152: KerberosString should use UTF-8 by default
Reviewed-by: xuelei
2018-04-10 11:02:09 +08:00
Weijun Wang
d9c5e142c0 8180570: Refactor sun/security/mscapi shell tests to plain java tests
Reviewed-by: asmotrak
2018-04-08 17:01:20 +08:00
Weijun Wang
05b129ec25 8186228: sun/security/krb5/auto/KdcPolicy.java fails with "java.lang.Exception: Does not match. Output is c30000c30000c30000"
Reviewed-by: mullan
2018-03-22 08:09:51 +08:00
Sean Coffey
5b02a98b21 8199018: Test crypto provider not registering
Reviewed-by: wetmore
2018-03-06 10:31:14 +00:00
Philipp Kunz
5db337db24 6372077: JarFile.getManifest() should handle manifest attribute name 70 bytes
Reviewed-by: alanb, sherman
2018-03-01 15:50:26 -05:00
Sean Coffey
14c85c2934 8193892: Impact of noncloneable MessageDigest implementation
Reviewed-by: wetmore, valeriep, xuelei
2018-02-28 18:28:17 +00:00
Weijun Wang
06a9e1a72f 8191438: jarsigner should print when a timestamp will expire
Reviewed-by: mullan
2018-02-14 16:58:49 +08:00
Lance Andersen
987c3a2d87 8190378: Removal of CORBA and Java EE modules
Reviewed-by: rriggs, alanb, mchung, erikj, goetz
2018-02-10 07:06:16 -05:00
Adam Petcher
8dcabfdf5f 8196215: sun/security/util/Resources/customSysClassLoader/MessageFormatting.java failed on ar_SA locale
Fixing a minor bug in a test related to policy parser message formatting

Reviewed-by: mullan, xuelei
2018-02-08 10:06:57 -05:00
Weijun Wang
48aad3bd2f 8196823: jarsigner should not create a signed jar if the signing fails
Reviewed-by: mullan, alanb
2018-02-08 11:44:21 +08:00
Adam Petcher
683817de43 8194251: Deadlock between UsageTracker and System.getProperty() when using a malformed security policy
Disable localization of error messages produced during policy file parsing

Reviewed-by: mchung, mullan
2018-02-07 09:06:43 -05:00
Joe Darcy
0b40438ae8 8194070: Update various tests to pass under JDK 11
Reviewed-by: alanb, sherman, psandoz
2018-01-31 11:25:34 -08:00
Weijun Wang
15ac25be9d 8177398: Exclude dot files ending with .conf from krb5.conf's includedir
Reviewed-by: mullan
2018-01-26 09:37:10 +08:00
Sibabrata Sahoo
4567ed7c3e 8194486: Several krb5 tests failed in Mac
Several tests failed due to improper host service

Reviewed-by: weijun
2018-01-25 05:57:22 -08:00
John Jiang
7e5577a6c1 8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed due to libnss3 version cannot be parsed
Improves the approach on parsing lib version

Reviewed-by: weijun, xuelei
2018-01-24 23:01:57 -08:00
Weijun Wang
724d1916fe 8014628: Support AES Encryption with HMAC-SHA2 for Kerberos 5
Reviewed-by: mullan
2018-01-22 12:00:41 +08:00
Lana Steuck
8f528fba93 Merge 2018-01-18 18:58:46 +00:00
Goetz Lindenmaier
0480f69dd5 8194869: [TESTBUG][aix, s390] Adapt tests to platforms
Reviewed-by: mbaesken, simonis, dholmes, serb
2018-01-18 10:26:39 +01:00
John Jiang
94ecb77665 8194864: Outputs more details for PKCS11 tests if the NSS lib version cannot be determined
It outputs the lib content if the lib version cannot be parsed

Reviewed-by: xuelei
2018-01-17 18:34:50 -08:00