Commit Graph

106 Commits

Author SHA1 Message Date
Valerie Peng
80dc262e81 8265500: Some impls of javax.crypto.Cipher.init() do not throw UnsupportedOperationExc for unsupported modes
Reviewed-by: xuelei
2021-06-17 23:27:54 +00:00
Sean Coffey
eb385c0de2 8268167: MultipleLogins.java failure on macosx-aarch64
Reviewed-by: weijun
2021-06-03 13:47:47 +00:00
Sean Coffey
bdeaeb47d0 8240256: Better resource cleaning for SunPKCS11 Provider
Reviewed-by: valeriep
2021-06-03 06:45:06 +00:00
Fernando Guallini
ccfcd92667 8180571: Refactor sun/security/pkcs11 shell tests to plain java tests and fix failures
Reviewed-by: xuelei
2021-06-01 19:09:42 +00:00
Evgeny Astigeevich
a859d87cc1 8267721: Enable sun/security/pkcs11 tests for Amazon Linux 2 AArch64
Reviewed-by: phh
2021-05-26 21:08:47 +00:00
Weijun Wang
640a2afda3 8267184: Add -Djava.security.manager=allow to tests calling System.setSecurityManager
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: dholmes, alanb, dfuchs, mchung, mullan, prr
2021-05-24 16:55:55 +00:00
Valerie Peng
5d8c1cc8a0 8255410: Add ChaCha20 and Poly1305 support to SunPKCS11 provider
Reviewed-by: jnimeh
2021-04-29 21:02:41 +00:00
Weijun Wang
f834557ae0 8258915: Temporary buffer cleanup
Reviewed-by: valeriep
2021-04-22 18:11:43 +00:00
Martin Balao
1ee80e03ad 8261355: No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding
Reviewed-by: valeriep
2021-04-12 20:58:08 +00:00
Ziyi Luo
a5d7de2351 8263404: RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
Co-authored-by: Greg Rubin <rubin@amazon.com>
Reviewed-by: valeriep
2021-03-29 20:14:47 +00:00
Christoph Langer
dc46aa85c6 8261534: Test sun/security/pkcs11/KeyAgreement/IllegalPackageAccess.java fails on platforms where no nsslib artifacts are defined
Reviewed-by: mbaesken
2021-02-12 20:58:22 +00:00
Martin Balao
47c7dc7734 8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
Reviewed-by: valeriep
2021-01-25 18:01:59 +00:00
Valerie Peng
68cf65d284 8023980: JCE doesn't provide any class to handle RSA private key in PKCS#1
Reviewed-by: weijun
2021-01-18 02:26:17 +00:00
Martin Balao
4be2173478 8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
Reviewed-by: valeriep, mullan
2021-01-12 23:44:19 +00:00
Roger Riggs
628c546bea 8258796: [test] Apply HexFormat to tests for java.security
Reviewed-by: xuelei
2021-01-08 21:32:54 +00:00
Valerie Peng
78c9fb92aa 8258851: Mismatch in SunPKCS11 provider registration properties and actual implementation
Reviewed-by: weijun
2020-12-23 22:36:45 +00:00
Valerie Peng
78be334c38 8242332: Add SHA3 support to SunPKCS11 provider
Reviewed-by: xuelei
2020-12-05 23:47:35 +00:00
Erik Joelsson
0b5101658d 8253660: Need better error report when artifact resolution fails in AotCompiler.java
Reviewed-by: ihse
2020-10-19 17:40:54 +00:00
Anthony Scarpino
fb206908b4 8253637: Update EC removal
Reviewed-by: mullan
2020-09-29 18:05:20 +00:00
Anthony Scarpino
0b83fc0150 8235710: Remove the legacy elliptic curves
Reviewed-by: xuelei, erikj
2020-09-25 02:40:36 +00:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Anthony Scarpino
b0245c2b54 8237219: Disable native SunEC implementation by default
Reviewed-by: weijun, mullan
2020-03-25 12:41:14 -07:00
Weijun Wang
e7a07ea2f3 8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
Reviewed-by: xuelei
2019-12-25 07:17:25 +08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
2019-12-09 21:38:12 -08:00
Valerie Peng
381e90eb6b 8229243: SunPKCS11-Solaris provider tests failing on Solaris 11.4
For CK_GCM_PARAMS, try the spec definition first before falling back to the header file definition

Reviewed-by: xuelei
2019-10-08 00:01:20 +00:00
Matthias Baesken
09c012be4e 8231357: sun/security/pkcs11/Cipher/TestKATForGCM.java fails on SLES11 using mozilla-nss-3.14
Reviewed-by: clanger, valeriep
2019-09-26 13:51:43 +02:00
John Jiang
0a0956bcda 8180837: SunPKCS11-NSS tests failing with CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
Reviewed-by: xuelei
2019-09-21 08:06:00 +08:00
John Jiang
dfe4ba5045 8226221: Update PKCS11 tests to use NSS 3.46 libs
Reviewed-by: xuelei
2019-09-04 12:47:42 +08:00
Sean Coffey
bb3d5aed04 8228645: Don't run sun/security/pkcs11/Cipher/TestKATForGCM.java on buggy NSS solaris versions
Reviewed-by: valeriep
2019-07-29 08:17:26 +00:00
Valerie Peng
1e0c8e5b26 8226651: Setting the mgfHash in CK_RSA_PKCS_PSS_PARAMS has no effect
Fixed to get the MGF digest algorithm from MGF1ParameterSpec

Reviewed-by: xuelei
2019-06-28 19:36:32 +00:00
Valerie Peng
8813b93095 8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
Added support for GCM, PSS, and other mechanisms

Reviewed-by: jnimeh
2019-06-11 21:30:28 +00:00
Martin Balao
ebf8e1c0ac 8223482: Unsupported ciphersuites may be offered by a TLS client
Reviewed-by: xuelei
2019-05-28 19:01:38 -03:00
John Jiang
34e49a24c0 8204203: Many pkcs11 tests failed in Provider initialization, after compiler on Windows changed
Build NSS 3.41 with VS2017 and also upgrade to this NSS for macosx

Reviewed-by: valeriep
2019-05-03 15:57:41 +08:00
Martin Balao
11bb97a71c 8222805: sun/security/pkcs11/tls/tls12/TestTLS12.java fails with Unsupported signature algorithm: rsa_pss_rsae_sha256
Reviewed-by: mullan, xuelei
2019-04-24 16:25:41 -03:00
Martin Balao
a8a29bbae6 8221271: sun/security/pkcs11/tls/tls12/TestTLS12.java test failed
Reviewed-by: xuelei
2019-04-19 10:59:09 -03:00
Valerie Peng
e90036145a 8220016: Clean up redundant RSA services in the SunJSSE provider
Removed duplicated RSA signature/KF/KPG support in SunJSSE

Reviewed-by: xuelei
2019-03-29 00:39:49 +00:00
Martin Balao
0814229ebc 8220753: Re-introduce the test case for TLS 1.2 algorithms in SunPKCS11 crypto provider
Reviewed-by: xuelei
2019-03-21 01:51:25 -03:00
Xue-Lei Andrew Fan
fca0af0487 8217835: Remove the experimental SunJSSE FIPS compliant mode
Reviewed-by: mullan
2019-02-12 13:36:15 -08:00
John Jiang
3525e4e27f 8214459: NSS source should be removed
Remove test/jdk/sun/security/pkcs11/nss/src

Reviewed-by: valeriep
2018-12-06 10:05:29 +08:00
Martin Balao
7724fd6d9b 8213154: Update copyright headers of files in src tree that are missing Classpath exception
Reviewed-by: andrew
2018-11-08 18:10:15 -03:00
John Jiang
afe05800ac 8209546: Make sun/security/tools/keytool/autotest.sh to support macosx
Refactor autotest.sh to java test and remove standard.sh

Reviewed-by: weijun
2018-09-28 15:42:20 +08:00
Martin Balao
aafb2b0474 8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
TLS v1.2 algorithms for key and MAC derivation added to SunPKCS11 crypto provider.

Reviewed-by: valeriep
2018-09-12 13:09:51 +02:00
John Jiang
c70c37db8a 8164639: Configure PKCS11 tests to use user-supplied NSS libraries
Provide system property "test.nss.lib.paths" for specifying a set of absolute paths to the custom NSS lib directories

Reviewed-by: weijun, rhalade
2018-08-15 18:41:18 +08:00
Yang Zhang
286115581e 8209011: [TESTBUG] AArch64: sun/security/pkcs11/Secmod/TestNssDbSqlite.java fails in aarch64 platforms
Add the path of libnss3.so for aarch64 platform.

Reviewed-by: weijun
2018-08-08 13:45:41 +08:00
John Jiang
126394f271 8206258: [Test Error] sun/security/pkcs11 tests fail if NSS libs not found
Improve the logics on skipping test

Reviewed-by: valeriep
2018-07-26 08:46:27 +08:00
Goetz Lindenmaier
9dcc8b4a96 8207766: [testbug] Adapt tests for Aix
Reviewed-by: clanger, mbaesken
2018-07-20 09:33:49 +02:00
Martin Balao
b44c24d290 8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java failed with "NSS initialization failed" on NSS 3.34.1
Reviewed-by: valeriep, weijun
2018-06-26 08:10:45 +08:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Tobias Wagner
5d58391226 7007966: Add Brainpool ECC support (RFC 5639)
Enhance SunEC provider with the support of brainpool256/320/384/512r1 curves

Reviewed-by: valeriep
2018-06-22 23:10:36 +00:00
John Jiang
7e5577a6c1 8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed due to libnss3 version cannot be parsed
Improves the approach on parsing lib version

Reviewed-by: weijun, xuelei
2018-01-24 23:01:57 -08:00
Lana Steuck
8f528fba93 Merge 2018-01-18 18:58:46 +00:00
Goetz Lindenmaier
0480f69dd5 8194869: [TESTBUG][aix, s390] Adapt tests to platforms
Reviewed-by: mbaesken, simonis, dholmes, serb
2018-01-18 10:26:39 +01:00
John Jiang
94ecb77665 8194864: Outputs more details for PKCS11 tests if the NSS lib version cannot be determined
It outputs the lib content if the lib version cannot be parsed

Reviewed-by: xuelei
2018-01-17 18:34:50 -08:00
Martin Balao
f1212e26c3 8165996: PKCS11 using NSS throws an error regarding secmod.db when NSS uses sqlite
Reviewed-by: weijun
2017-12-13 01:29:58 +08:00
Adam Petcher
91a1005273 8185292: Stricter key generation
Reviewed-by: mullan
2017-10-24 09:58:27 -04:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00