Commit Graph

46 Commits

Author SHA1 Message Date
Jamil Nimeh
a55dd41fc7 8074064: OCSPResponse.SingleResponse objects do not parse singleExtensions
Reviewed-by: mullan, vinnie
2015-03-13 09:32:54 -07:00
Jason Uh
f7f4ab9df6 8042967: Add variant of DSA Signature algorithms that do not ASN.1 encode the signature bytes
Reviewed-by: mullan
2015-02-17 10:48:24 -08:00
Peter Levart
4029366de9 8047769: SecureRandom should be more frugal with file descriptors
Introduce FileInputStreamPool to cache open FileInputStreams

Reviewed-by: wetmore, alanb, chegar
2015-01-21 12:49:53 +01:00
Valerie Peng
ac09164efa 8039921: SHA1WithDSA with key > 1024 bits not working
Removed the key size limits for all SHAXXXWithDSA signatures

Reviewed-by: weijun
2014-12-30 22:03:23 +00:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
2014-07-10 22:44:58 +00:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual
Reviewed-by: xuelei, wetmore
2014-03-18 15:04:59 -07:00
Jason Uh
323843f397 8021804: Certpath validation fails if validity period of root cert does not include validity period of intermediate cert
Reviewed-by: mullan
2014-03-12 08:55:35 -07:00
Jason Uh
d6207a4ca5 8036844: test failures due to wrong keystore paths
Reviewed-by: weijun
2014-03-07 10:40:03 -08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
2014-01-17 21:54:30 +01:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property
Reviewed-by: mullan, weijun
2014-01-13 21:12:58 -08:00
Vinnie Ryan
242d5a95bd 8028377: test/sun/security/provider/KeyStore/DKSTest.sh attempts to write to ${test.src}
Reviewed-by: alanb, weijun
2013-11-19 15:39:58 +00:00
Vinnie Ryan
f36ff9e467 8008171: Refactor KeyStore.DomainLoadStoreParameter as a standalone class
Reviewed-by: mullan, weijun
2013-10-09 10:48:44 +01:00
Bradford Wetmore
47f46da3fa 8025694: Rename getStrongSecureRandom based on feedback
8014838: getStrongSecureRandom() should require at least one implementation

Reviewed-by: mullan, darcy
2013-10-02 09:38:57 -07:00
Jason Uh
33196b314d 8007699: Move some tests from test/sun/security/provider/certpath/X509CertPath to closed repo
Reviewed-by: mullan
2013-05-09 12:00:46 -07:00
Alan Bateman
d51ab5c39c 8012530: test/sun/security/provider/SecureRandom/StrongSeedReader.java failing
Reviewed-by: wetmore
2013-04-25 17:10:36 -07:00
Bradford Wetmore
63a6638ebf 6425477: Better support for generation of high entropy random numbers
Reviewed-by: xuelei, weijun, mullan
2013-04-11 21:03:24 -07:00
Sean Mullan
6cd495e473 8008908: Access denied when invoking Subject.doAsPrivileged()
Wildcard principal names are not processed correctly

Reviewed-by: xuelei
2013-03-01 16:12:50 -05:00
Vinnie Ryan
8f58ebc261 8007755: Support the logical grouping of keystores
Reviewed-by: mullan
2013-02-13 19:40:51 +00:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Sean Mullan
86b40c8697 Merge 2013-01-09 08:59:58 -05:00
Sean Mullan
d01edb0815 Merge 2013-01-08 19:02:55 -05:00
Sean Mullan
b492dc9bac 7019834: Eliminate dependency from PolicyFile to com.sun.security.auth.PrincipalComparator
Add new java.security.Principal.implies method

Reviewed-by: alanb
2013-01-08 19:00:12 -05:00
Xue-Lei Andrew Fan
6d41a58c82 7109274: Restrict the use of certificates with RSA keys less than 1024 bits
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.

Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
Mark Sheppard
c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Jason Uh
fdfd7968f7 7198416: CertificateIssuerName and CertificateSubjectName are redundant
Reviewed-by: mullan
2012-11-08 12:51:25 -05:00
Alan Bateman
430592a30e 7197491: update copyright year to match last edit in jdk8 jdk repository
Reviewed-by: chegar, ksrini
2012-11-02 15:50:11 +00:00
Alan Bateman
30d429cc25 8000268: sun/security/provider/X509Factory/BigCRL.java failing on Linux 32-bit
Reviewed-by: mullan
2012-10-02 12:23:16 +01:00
Valerie Peng
a431f9851d 7044060: Need to support NSA Suite B Cryptography algorithms
Add support for DSA parameter generation and OIDs for NSA Suite B algorithms.

Reviewed-by: vinnie
2012-09-04 18:41:06 -07:00
Xue-Lei Andrew Fan
9190ab1d6b 7167988: PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified
Reviewed-by: mullan
2012-05-14 07:26:53 -07:00
Valerie Peng
879e30901e 4963723: Implement SHA-224
Add support for SHA-224, SHA224withRSA, SHA224withECDSA, HmacSHA224 and OAEPwithSHA-224AndMGF1Padding.

Reviewed-by: vinnie
2012-05-08 17:57:48 -07:00
Alan Bateman
3269d85838 7113349: Initial changeset for Macosx port to jdk
Co-authored-by: Alexander Potochkin <alexander.potochkin@oracle.com>
Co-authored-by: Alexander Zuev <alexander.zuev@oracle.com>
Co-authored-by: Andrew Brygin <andrew.brygin@oracle.com>
Co-authored-by: Artem Ananiev <artem.ananiev@oracle.com>
Co-authored-by: Alex Strange <astrange@apple.com>
Co-authored-by: Bino George <bino@apple.com>
Co-authored-by: Christine Lu <christine.lu@oracle.com>
Co-authored-by: David Katleman <david.katleman@oracle.com>
Co-authored-by: David Durrence <david_durrence@apple.com>
Co-authored-by: Dmitry Cherepanov <dmitry.cherepanov@oracle.com>
Co-authored-by: Greg Lewis <glewis@eyesbeyond.com>
Co-authored-by: Kevin Miller <kevin_m_miller@apple.com>
Co-authored-by: Kurt Miller <kurt@intricatesoftware.com>
Co-authored-by: Landon Fuller <landonf@plausiblelabs.com>
Co-authored-by: Leonid Romanov <leonid.romanov@oracle.com>
Co-authored-by: Loefty Walkowiak <loefty@apple.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Roger Hoover <rhoover@apple.com>
Co-authored-by: Scott Kovatch <scott.kovatch@oracle.com>
Co-authored-by: Sergey ByloKhov <sergey.bylokhov@oracle.com>
Co-authored-by: Mike Swingler <swingler@apple.com>
Co-authored-by: Tomas Hurka <tomas.hurka@oracle.com>
Reviewed-by: jjh, alanb, dholmes, anthony, ohrstrom, ksrini, jrose, weijun, smarks
2012-03-06 20:34:38 +00:00
Lana Steuck
b697d670cb Merge 2012-02-28 18:01:54 -08:00
Sean Mullan
48ca85ec46 7147830: NullPointerException in java.security.Policy.implies() when the ProtectionDomain has a null code sou
Reviewed-by: vinnie
2012-02-27 11:44:50 -05:00
Abhijit Saha
162d75c68c Merge 2012-02-20 11:31:53 -08:00
Xue-Lei Andrew Fan
74fcfe6c7e 7123519: problems with certification path
Also including the contribution from Dennis Gu

Reviewed-by: mullan, weijun
2012-01-09 20:55:52 -08:00
Weijun Wang
ab1010388d 7099399: cannot deal with CRL file larger than 16MB
Reviewed-by: xuelei, mullan
2011-10-17 17:11:26 +08:00
Weijun Wang
610c9dd4e3 7055363: jdk_security3 test target cleanup
Reviewed-by: alanb, xuelei
2011-08-12 12:26:31 +08:00
Sean Coffey
6ed5196d7d 7016897: Copyright header correction : test/sun/security/provider/SeedGenerator/SeedGeneratorChoice.java
Reviewed-by: vinnie
2011-02-03 11:28:04 +00:00
Xue-Lei Andrew Fan
85a3f20cef 7011497: new CertPathValidatorException.BasicReason enum constant for constrained algorithm
Add new BasicReason and improve trust anchor searching method during cert path validation

Reviewed-by: mullan
2011-02-01 04:45:10 -08:00
Sean Coffey
6c39971cb7 6998583: NativeSeedGenerator is making 8192 byte read requests from entropy pool on each init
Reviewed-by: wetmore, andrew, vinnie
2010-12-10 15:11:47 +00:00
Kelly O'Hair
fe008ae27a 6943119: Rebrand source copyright notices
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
Xue-Lei Andrew Fan
c14324faa5 6861062: Disable MD2 support
Reviewed-by: mullan, weijun
2009-08-18 20:47:13 -07:00
Bradford Wetmore
fc188b8b29 6867657: Many JSN tests do not run under cygwin
Reviewed-by: ohair
2009-08-06 17:56:59 -07:00
J. Duke
319a3b9947 Initial load 2007-12-01 00:00:00 +00:00