Commit Graph

605 Commits

Author SHA1 Message Date
Joe Darcy
86c109e149 8078334: Mark regression tests using randomness
Reviewed-by: xuelei, alanb
2015-04-29 10:25:53 -07:00
Phil Race
60bb43ad32 Merge 2015-04-29 08:52:47 -07:00
Joe Darcy
84bc5a8a04 8078880: Mark a few more intermittently failuring security-libs
Reviewed-by: xuelei
2015-04-29 08:37:57 -07:00
Phil Race
96700da961 Merge 2015-04-27 09:17:39 -07:00
Artem Smotrakov
64969c0889 8075007: Additional tests for krb5-related cipher suites with unbound server
Reviewed-by: weijun
2015-04-27 21:02:40 +08:00
Vinnie Ryan
9ef4bd4a6c 8078348: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with BindException
Reviewed-by: xuelei
2015-04-22 14:01:01 +01:00
Xue-Lei Andrew Fan
b7bf7fd3fd 8076328: Enforce key exchange constraints
Reviewed-by: wetmore, igerasim, ahgross, asmotrak
2015-04-22 05:09:54 +00:00
Jason Uh
454ec2e69d 7194452: Remove "Reverse" PKIX CertPathBuilder implementation
Reviewed-by: mullan
2015-04-17 11:51:47 -07:00
Phil Race
041bb07b95 Merge 2015-04-15 14:28:43 -07:00
Artem Smotrakov
dc99c45870 8076221: Disable RC4 cipher suites
Reviewed-by: xuelei, wetmore
2015-04-15 07:34:24 +00:00
Jason Uh
31a7b46b00 8076117: EndEntityChecker should not process custom extensions after PKIX validation
Reviewed-by: xuelei, mullan
2015-04-14 13:02:23 -07:00
Shobhit Gupta
609fc7915d 8076069: [macosx][TESTBUG] tests failing with Unrecognized system error
Reviewed-by: serb, azvegint, kshefov
2015-04-13 19:39:40 +03:00
Weijun Wang
3fbfa7ee89 8074935: jdk8 keytool doesn't validate pem files for RFC 1421 correctness, as jdk7 did
Reviewed-by: mullan
2015-03-23 08:51:51 +08:00
Joe Darcy
ed05aef3fc 8075567: Mark intermittently failuring security-libs tests
Reviewed-by: mullan
2015-03-22 10:27:22 -07:00
Jamil Nimeh
a55dd41fc7 8074064: OCSPResponse.SingleResponse objects do not parse singleExtensions
Reviewed-by: mullan, vinnie
2015-03-13 09:32:54 -07:00
Weijun Wang
2bcc0c7789 8074018: Named extension not recognized in keytool -ext honored after 8073182
Reviewed-by: mullan
2015-02-28 10:47:07 +08:00
Weijun Wang
c12ac1b4cc 8073853: KeyToolTest.java has too many too long lines
Reviewed-by: mullan
2015-02-26 08:08:52 +08:00
Weijun Wang
b505d5ad05 8073182: keytool may generate duplicate extensions
Reviewed-by: mullan
2015-02-25 18:30:29 +08:00
Weijun Wang
ed25ae3aeb 8073181: keytool -ext honored not working correctly
Reviewed-by: mullan
2015-02-25 18:30:07 +08:00
Jason Uh
9a2cc32b19 8072663: Remove the sun.security.acl package which is not used in the JDK
Reviewed-by: mullan, alanb, mchung
2015-02-23 11:40:48 -08:00
Jason Uh
f7f4ab9df6 8042967: Add variant of DSA Signature algorithms that do not ASN.1 encode the signature bytes
Reviewed-by: mullan
2015-02-17 10:48:24 -08:00
Anthony Scarpino
ad70e04133 8022313: sun/security/pkcs11/rsa/TestKeyPairGenerator.java failed in aurora
Reviewed-by: mullan
2015-02-13 10:44:53 -08:00
Rob McKenna
4c95aedcd9 8065553: Failed Java web start via IPv6 (Java7u71 or later)
Reviewed-by: xuelei
2015-02-10 23:32:48 +00:00
Artem Smotrakov
9ed9f4f4a9 8130041: TsacertOptionTest.java intermittently fails on Mac
Reviewed-by: vinnie
2015-07-14 16:46:28 +01:00
Weijun Wang
5d91ae3352 8058290: JAAS Krb5LoginModule has suspect ticket-renewal logic, relies on clockskew grace
Reviewed-by: mullan
2015-07-13 17:44:34 +08:00
Weijun Wang
873b88dcc9 8022582: Relax response flags checking in sun.security.krb5.KrbKdcRep.check
Reviewed-by: mullan
2015-01-27 18:16:27 +08:00
Weijun Wang
6a34176e9c 8071562: TimestampCheck.java change removes a whitespace between command and args
Reviewed-by: alanb
2015-01-26 21:55:05 +08:00
Artem Smotrakov
1eeff6da6e 8049171: Additional tests for jarsigner's warnings
Reviewed-by: weijun
2015-01-26 18:13:42 +08:00
Weijun Wang
ddba00b834 8055045: StringIndexOutOfBoundsException while reading krb5.conf
Reviewed-by: mullan
2015-01-26 09:29:29 +08:00
Jamil Nimeh
3d738985d7 8044860: Vectors and fixed length fields should be verified for allowed sizes
Reviewed-by: xuelei
2015-01-22 20:19:42 -08:00
Vinnie Ryan
d80497254d 8069155: The value of 'KeyStore Type' isn't 'jks'
Reviewed-by: xuelei
2015-01-22 12:33:05 +00:00
Xue-Lei Andrew Fan
83143ef7f8 8061210: Issues in TLS
Reviewed-by: jnimeh, mullan, wetmore, ahgross, asmotrak
2014-11-03 08:30:18 +00:00
Peter Levart
4029366de9 8047769: SecureRandom should be more frugal with file descriptors
Introduce FileInputStreamPool to cache open FileInputStreams

Reviewed-by: wetmore, alanb, chegar
2015-01-21 12:49:53 +01:00
Jason Uh
3793acecce 8059916: Change default criticality of policy mappings and policy constraints certificate extensions
Reviewed-by: mullan
2015-01-13 14:33:54 -08:00
Artem Smotrakov
e268dee361 8048603: Additional tests for MAC algorithms
Reviewed-by: valeriep
2015-01-13 14:26:34 +03:00
Valerie Peng
ac09164efa 8039921: SHA1WithDSA with key > 1024 bits not working
Removed the key size limits for all SHAXXXWithDSA signatures

Reviewed-by: weijun
2014-12-30 22:03:23 +00:00
Vinnie Ryan
befd7d1c25 8044445: JEP 229: Create PKCS12 Keystores by Default
Reviewed-by: mullan, weijun
2014-12-23 16:30:57 +00:00
Valerie Peng
86291780cb 8062170: java.security.ProviderException: Error parsing configuration with space
Updated to parse library path as a line which can contain quoted strings.

Reviewed-by: vinnie
2014-12-12 00:23:32 +00:00
Weijun Wang
26099e744a 8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes
Reviewed-by: valeriep
2014-12-09 18:28:26 +08:00
David Kocher
15d4deb44a 8046777: apple.security.KeychainStore has a problem searching for identities
Reviewed-by: mullan
2014-11-11 20:11:34 +00:00
Anthony Scarpino
1924ac8a18 8063700: -Xcheck:jni changes cause many JCK failures in api/javax_crypto tests in SunPKCS11
Reviewed-by: mullan, valeriep
2014-11-07 13:07:09 -08:00
Weijun Wang
ed9e73bb66 8057810: New defaults for DSA keys in jarsigner and keytool
Reviewed-by: vinnie
2014-11-05 17:15:09 +08:00
Florian Bruckner
9299e8a8a6 8062264: KeychainStore requires non-null password to be supplied when retrieving a private key
Reviewed-by: mullan
2014-10-29 11:53:37 +00:00
Mandy Chung
a76f56165c 8043277: Update jdk regression tests to extend the default security policy instead of override
Reviewed-by: alanb, mullan, chegar, sla
2014-10-27 13:45:39 -07:00
Weijun Wang
cd3c6765c2 8044215: Unable to initiate SpNego using a S4U2Proxy GSSCredential (Krb5ProxyCredential)
Reviewed-by: mullan
2014-10-14 10:08:32 +08:00
Weijun Wang
5468e30603 8029659: Keytool, print key algorithm of certificate or key entry
Reviewed-by: xuelei
2014-10-14 10:07:44 +08:00
Weijun Wang
76b1f8c99c 8060007: Keytool test can use bundled NSS lib on Mac
Reviewed-by: vinnie
2014-10-09 16:05:24 +08:00
Vinnie Ryan
3215ed2f0a 8059627: Enable PKCS11 tests on Mac
Reviewed-by: mullan
2014-10-06 16:44:57 +01:00
Vinnie Ryan
a8d4acac11 8041740: Test sun/security/tools/keytool/ListKeychainStore.sh fails on Mac
Reviewed-by: mullan
2014-10-05 14:24:44 +01:00
Weijun Wang
4a99ec3dce 8059313: Enable keytool NSS test on Mac
Reviewed-by: vinnie
2014-09-28 10:42:50 +08:00
Weijun Wang
f18f44bce3 8042900: Allow com.sun.security.jgss to be in different module than org.ietf.jgss
Reviewed-by: valeriep, alanb
2014-09-17 13:55:12 +08:00
Ivan Gerasimov
13da43d0d4 8055731: sun/security/smartcardio/TestDirect.java throws java.lang.IndexOutOfBoundsException
Reviewed-by: valeriep
2014-08-23 01:05:50 +04:00
Weijun Wang
391a556d14 8054817: File ccache only recognizes Linux and Solaris defaults
Reviewed-by: mullan
2014-08-19 14:30:12 +08:00
Ivan Gerasimov
e3b86ec908 8046343: (smartcardio) CardTerminal.connect('direct') does not work on MacOSX
Reviewed-by: mullan, valeriep
2014-08-07 15:32:23 +04:00
Vinnie Ryan
b572fc9aad 8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
Reviewed-by: mullan
2014-08-05 13:59:15 +01:00
Weijun Wang
d99124eadb 8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
Reviewed-by: mullan
2014-07-21 22:10:37 +08:00
Weijun Wang
0f6c52abb1 8049834: Two security tools tests do not run with only JRE
Reviewed-by: mullan
2014-07-21 22:09:38 +08:00
Weijun Wang
bfa19ebfbc 8043071: Expose session key and KRB_CRED through extended GSS-API
Reviewed-by: mullan
2014-07-19 10:20:42 +08:00
Ivan Gerasimov
80448466d4 8050893: (smartcardio) Invert reset argument in tests in sun/security/smartcardio
Reviewed-by: valeriep
2014-07-18 17:04:10 +04:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
2014-07-10 22:44:58 +00:00
Weijun Wang
57d0562d7c 8044085: Access ExtendedGSSContext.inquireSecContext() result through SASL
Reviewed-by: mullan
2014-07-10 10:44:48 +08:00
Weijun Wang
ea1882be4f 8048073: Cannot read ccache entry with a realm-less service name
Reviewed-by: xuelei
2014-06-25 18:49:02 +08:00
Weijun Wang
cc269950df 8029994: Support "include" and "includedir" in krb5.conf
Reviewed-by: mullan
2014-06-20 10:27:10 +08:00
Vinnie Ryan
7d5e52ba49 8047085: PKCS11/NSS tests failing intermittently on Windows
Reviewed-by: mullan
2014-06-18 15:05:29 +01:00
Weijun Wang
a22c2ed67f 8046702: default_options.sh test failure on Solaris
Reviewed-by: xuelei
2014-06-13 08:25:50 +08:00
Weijun Wang
53c7b2ac2b 8023197: Pre-configured command line options for keytool and jarsigner
Reviewed-by: xuelei
2014-06-11 18:27:10 +08:00
Anthony Scarpino
b757b4461e 8039212: SecretKeyBasic.sh needs to avoid NSS libnss3 and libsoftokn3 version mismatches
Reviewed-by: vinnie
2014-06-10 12:04:42 -07:00
Weijun Wang
704a20b250 8044747: [TESTBUG] Test sun/security/tools/policytool/i18n.sh fails after clicking 'Done' button in test frame
Reviewed-by: xuelei
2014-06-06 22:31:53 +08:00
Weijun Wang
47e4638160 8044755: Add a test for algorithm constraints check in jarsigner
Reviewed-by: xuelei
2014-06-05 15:27:51 +08:00
Weijun Wang
a57ab24f53 8036779: sun.security.krb5.KdcComm interprets kdc_timeout as msec instead of sec
Reviewed-by: xuelei
2014-05-30 14:37:43 +08:00
Vinnie Ryan
1eef4367df 8044038: Security tests fail on 32 bit linux platform
Reviewed-by: xuelei, weijun
2014-05-29 15:50:36 +01:00
Weijun Wang
1b1639105a 8036709: Java 7 jarsigner displays warning about cert policy tree
Reviewed-by: mullan
2014-05-29 10:36:06 +08:00
Weijun Wang
53cb60f148 8043537: Changes for JDK-8039951 introduced circular dependency between Kerberos and com.sun.security.auth
Reviewed-by: alanb
2014-05-22 07:04:57 +08:00
Jamil Nimeh
4e99062caa 6996377: shrink duplicate code in the constructor of PKIXValidator
Reviewed-by: mullan, xuelei
2014-05-12 12:35:23 -04:00
Weijun Wang
79cdf6ad7f 8039951: com.sun.security.auth.module missing classes on some platforms
Reviewed-by: mullan
2014-05-08 22:30:31 +08:00
Weijun Wang
93378ad4b9 8040321: keytool and jarsigner tests doesn't pass though VM tools to tools
Reviewed-by: alanb
2014-04-25 10:57:09 +08:00
Alexandre Iline
e613bf3290 8039816: Some tests depend on internal API sun.security.action.GetPropertyAction
Replace sun.security.action.GetPropertyAction usages with lambda expressions creating java.security.PrivilegedAction.

Reviewed-by: alanb, mchung, chegar
2014-04-21 13:16:32 -07:00
Alexandre Iline
092e29980a 8039438: Some tests depend on internal API sun.misc.IOUtils
Remove dependency on sun.misc.IOUtils.readFully(InputStream, int, boolean)

Reviewed-by: alanb, mchung, chegar
2014-04-21 13:12:22 -07:00
Weijun Wang
b49a1407bc 8038837: Add support to jarsigner for specifying timestamp hash algorithm
Reviewed-by: vinnie
2014-04-21 10:26:03 +08:00
Xue-Lei Andrew Fan
2f501cd8a5 8028192: Use of PKCS11-NSS provider in FIPS mode broken
Reviewed-by: ahgross, ascarpino, asmotrak
2014-04-09 12:49:51 +00:00
Weijun Wang
3344a6c353 8039132: cleanup @ignore JAAS/krb5 tests
Reviewed-by: xuelei
2014-04-09 17:08:37 +08:00
Weijun Wang
9bae1e597b 8029995: accept yes/no for boolean krb5.conf settings
Reviewed-by: mullan
2014-04-04 21:19:43 +08:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual
Reviewed-by: xuelei, wetmore
2014-03-18 15:04:59 -07:00
Xue-Lei Andrew Fan
451daea8f4 8037346: Need to terminate server process if client runs into problems
Reviewed-by: weijun
2014-03-17 10:07:13 +00:00
Jason Uh
323843f397 8021804: Certpath validation fails if validity period of root cert does not include validity period of intermediate cert
Reviewed-by: mullan
2014-03-12 08:55:35 -07:00
Weijun Wang
e83e738c09 8035963: The failed Kerberos tests due to timeouts
Reviewed-by: alanb, xuelei
2014-03-12 14:18:01 +08:00
Weijun Wang
fd6995ab56 8036971: krb5.conf does not accept directive lines before the first section
Reviewed-by: xuelei
2014-03-11 07:56:49 +08:00
Jason Uh
d6207a4ca5 8036844: test failures due to wrong keystore paths
Reviewed-by: weijun
2014-03-07 10:40:03 -08:00
Xue-Lei Andrew Fan
521f9a2048 8032473: Restructure JSSE regression test hierarchy in jdk test
Reviewed-by: weijun
2014-03-05 07:24:34 +00:00
Weijun Wang
0903468259 8036104: Rename the PAData.java test
Reviewed-by: xuelei
2014-03-03 10:55:31 +08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
Michael Cui
dca4d10631 8028711: TEST_BUG: Shell tests should pass through VM options
Reviewed-by: alanb
2014-02-13 15:59:04 +00:00
Weijun Wang
2b7c6c0d41 8034762: Move krb5.conf related tests into a single place
Reviewed-by: xuelei
2014-02-12 19:20:43 +08:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Weijun Wang
49fdbfba20 8031572: jarsigner -verify exits with 0 when a jar file is not properly signed
Reviewed-by: mullan
2014-01-25 18:16:33 +08:00
Vladimir Kozlov
9c83896027 Merge 2014-01-22 14:17:32 -08:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
2014-01-17 21:54:30 +01:00
Abhijit Saha
a9a038efa7 Merge 2014-01-15 10:09:00 -08:00
Xue-Lei Andrew Fan
ca25819893 8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
Reviewed-by: mullan
2014-01-14 06:41:10 -08:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property
Reviewed-by: mullan, weijun
2014-01-13 21:12:58 -08:00