Commit Graph

142 Commits

Author SHA1 Message Date
Sean Mullan
6d91a3eb7b 8269039: Disable SHA-1 Signed JARs
Reviewed-by: weijun
2021-09-21 13:45:47 +00:00
Hai-May Chao
fc38331f44 8260960: Signs of jarsigner signing
Reviewed-by: weijun, rhalade
2021-07-21 20:28:55 +00:00
Hai-May Chao
f2d880c11a 8266400: importkeystore fails to a password less pkcs12 keystore
Reviewed-by: weijun
2021-05-24 15:38:32 +00:00
Hai-May Chao
995e956030 8266225: jarsigner is using incorrect security property to show weakness of certs
Reviewed-by: weijun, mullan
2021-05-11 19:37:26 +00:00
Weijun Wang
48bb996ac9 8266220: keytool still prompt for store password on a password-less pkcs12 file if -storetype pkcs12 is specified
Reviewed-by: coffeys, hchao
2021-04-30 14:04:13 +00:00
Sean Mullan
7232e3c704 8249906: Enhance opening JARs
Reviewed-by: weijun, rhalade, mschoene
2021-04-20 21:45:52 +00:00
Weijun Wang
9cd5400d9b 8265138: Simplify DerUtils::checkAlg
Reviewed-by: xuelei
2021-04-13 16:56:36 +00:00
Hai-May Chao
719f95e504 8260693: Provide the support for specifying a signer in keytool -genkeypair
Reviewed-by: weijun
2021-04-09 01:59:59 +00:00
Hai-May Chao
05301f5fd2 8257497: Update keytool to create AKID from the SKID of the issuing certificate as specified by RFC 5280
Reviewed-by: coffeys, mullan, weijun
2021-02-17 16:38:56 +00:00
Fernando Guallini
d2bd499222 8163498: Many long-running security libs tests
Reviewed-by: rhalade, weijun
2021-02-05 05:22:51 +00:00
Fernando Guallini
9f0a043648 8260286: Manual Test "ws/open/test/jdk/sun/security/tools/jarsigner/compatibility/Compatibility.java" fails
Reviewed-by: rhalade
2021-01-26 18:15:26 +00:00
Hai-May Chao
c7e2174bf1 8259401: Add checking to jarsigner to warn weak algorithms used in signer’s cert chain
Reviewed-by: mullan, weijun, rhalade
2021-01-13 22:32:45 +00:00
Rajan Halade
4ce83f2a3a 8039278: console.sh failed Automatically with exit code 1
Reviewed-by: xuelei, weijun
2021-01-07 18:47:43 +00:00
Christoph Langer
1e9a432d59 8256202: Some tweaks for jarsigner tests PosixPermissionsTest and SymLinkTest
Reviewed-by: mbaesken
2020-11-13 17:28:05 +00:00
Weijun Wang
f77a658557 8153005: Upgrade the default PKCS12 encryption/MAC algorithms
Reviewed-by: mullan
2020-10-30 13:23:33 +00:00
Weijun Wang
839f01ddf5 8242068: Signed JAR support for RSASSA-PSS and EdDSA
Reviewed-by: valeriep
2020-10-21 14:18:43 +00:00
Anthony Scarpino
0b83fc0150 8235710: Remove the legacy elliptic curves
Reviewed-by: xuelei, erikj
2020-09-25 02:40:36 +00:00
Sean Coffey
7686e87155 8250968: Symlinks attributes not preserved when using jarsigner on zip files
Reviewed-by: lancea, weijun, hchao
2020-09-07 19:01:07 +00:00
Abdul Kolarkunnu
b5d775f115 8248745: Add jarsigner and keytool tests for restricted algorithms
Reviewed-by: mullan, hchao
2020-08-08 20:29:27 -07:00
Hai-May Chao
cce3929e07 8247960: jarsigner says "signer errors" for some normal warnings when -strict is set
8250586: jarsigner refactoring in displayMessagesAndResult() method

Reviewed-by: weijun
2020-07-25 16:40:10 +08:00
Jesper Wilhelmsson
3dcd1c1ab0 Merge 2020-07-09 04:32:30 +02:00
Anthony Scarpino
a0e5043781 8246806: Incorrect copyright header in KeyAgreementTest.java, GroupName.java
Reviewed-by: weijun
2020-07-08 08:58:05 -07:00
John Jiang
ff8c6d5deb 8246709: sun/security/tools/jarsigner/TsacertOptionTest.java compilation failed after JDK-8244683
Reviewed-by: weijun
2020-06-06 13:51:23 +08:00
John Jiang
13d30235e1 8244683: A TSA server used by tests
Reviewed-by: weijun
2020-06-05 23:36:01 +08:00
Sean Coffey
3d9bad16d1 8218021: Have jarsigner preserve posix permission attributes
Reviewed-by: weijun, lancea, alanb
2020-07-02 08:17:31 +00:00
Hai-May Chao
e3eb38f4d2 8244148: keytool -printcert and -printcrl should support the -trustcacerts and -keystore options
Reviewed-by: weijun, jjiang
2020-06-23 16:30:38 +08:00
Valerie Peng
56b7960496 8242897: KeyFactory.generatePublic( x509Spec ) failed with java.security.InvalidKeyException
Changed SunRsaSign provider to accept RSA signature oid in RSA key encoding for backward compatibility

Reviewed-by: weijun
2020-06-03 04:29:04 +00:00
Hai-May Chao
ccd7d70586 8245665: Test WeakAlg.java should only make sure no warning for weak signature algorithms by keytool on root CA
Reviewed-by: weijun
2020-05-23 14:49:55 +08:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Hai-May Chao
a97932d8fc 8245151: jarsigner should not raise duplicate warnings on verification
Reviewed-by: weijun
2020-05-19 11:55:44 +08:00
Hai-May Chao
76507eef63 8242060: Add revocation checking to jarsigner
Reviewed-by: mullan, weijun
2020-05-07 10:48:06 +08:00
Hai-May Chao
f04a7e5cb4 8172404: Tools should warn if weak algorithms are used before restricting them
Reviewed-by: mullan, weijun
2020-04-17 20:11:39 +08:00
Weijun Wang
dc6d76f518 8242260: Add forRemoval=true to already deprecated ContentSigner
Reviewed-by: alanb, mullan, xuelei
2020-04-16 13:47:09 +08:00
Weijun Wang
d8539a51ef 8242184: CRL generation error with RSASSA-PSS
Reviewed-by: xuelei
2020-04-08 10:13:12 +08:00
Anthony Scarpino
b0245c2b54 8237219: Disable native SunEC implementation by default
Reviewed-by: weijun, mullan
2020-03-25 12:41:14 -07:00
Amy Lu
67ba91ba52 8239979: sun/security/tools/keytool/ExtOptionCamelCase.java is not run
Reviewed-by: rhalade
2020-02-27 12:19:24 +08:00
Sean Mullan
a0f8febb8b 8230318: Better trust store usage
Reviewed-by: weijun, rhalade, ahgross
2019-10-22 17:25:34 -04:00
Sean Mullan
6cb8dfa9e3 8227758: More valid PKIX processing
Reviewed-by: xuelei, rhalade, coffeys, mschoene
2019-08-26 13:57:51 -04:00
Weijun Wang
8c6eb44946 8026393: jarsigner never shows a warning in badKeyUsage case
Reviewed-by: mullan
2019-11-22 09:33:03 +08:00
Weijun Wang
c0d097eac6 8214024: Remove the default keytool -keyalg value
Reviewed-by: mullan
2019-11-15 09:06:58 +08:00
Weijun Wang
a66829bc89 8231950: keytool -ext camel-case shorthand not working
Reviewed-by: mullan
2019-11-04 14:26:18 +08:00
Weijun Wang
b84ffae32f 8229775: Incorrect warning when jar was signed with -sectionsonly
Reviewed-by: mullan
2019-08-16 08:42:09 +08:00
John Jiang
804e840856 8228403: SignTwice.java failed with java.io.FileNotFoundException: File name too long
Reviewed-by: mullan
2019-07-27 10:02:35 +08:00
Weijun Wang
78c7364c17 8228341: SignTwice.java fails intermittently on Windows
Reviewed-by: mullan
2019-07-24 10:09:30 +08:00
Weijun Wang
9c12b7f41d 8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to "exitValue = 6"
Reviewed-by: mullan
2019-07-24 10:09:22 +08:00
Philipp Kunz
b6d1b1e085 8217375: jarsigner breaks old signature with long lines in manifest
Reviewed-by: jjiang, weijun
2019-07-18 08:53:06 +08:00
Weijun Wang
32d0bae08d 8227059: sun/security/tools/keytool/DefaultSignatureAlgorithm.java timed out
Reviewed-by: xuelei
2019-07-10 09:43:35 +08:00
Weijun Wang
a2b3db108a 8225257: sun/security/tools/keytool/PSS.java timed out
Reviewed-by: valeriep
2019-06-21 23:44:58 +08:00
Weijun Wang
c12cf04011 8225392: Comparison builds are failing due to cacerts file
Reviewed-by: erikj, martin, mullan
2019-06-15 14:39:04 +08:00
Philipp Kunz
6d3f5f851e 8221719: Jarsigner fails to verify signed by alias if alias given in wrong case
Reviewed-by: weijun
2019-06-10 20:38:15 +08:00
Weijun Wang
2bf347445c 8222987: sun/security/tools/keytool/PSS.java times out on Solaris-SPARC
Reviewed-by: mullan, xuelei
2019-05-09 08:49:31 +08:00
John Jiang
34e49a24c0 8204203: Many pkcs11 tests failed in Provider initialization, after compiler on Windows changed
Build NSS 3.41 with VS2017 and also upgrade to this NSS for macosx

Reviewed-by: valeriep
2019-05-03 15:57:41 +08:00
Weijun Wang
6f032ffbb5 8222275: sun/security/tools/keytool/Serial64.java: assertTrue: expected true, was false
Reviewed-by: xuelei
2019-04-14 10:22:56 +08:00
Weijun Wang
15aae2f622 8180573: Refactor sun/security/tools shell tests to plain java tests
Reviewed-by: rhalade, valeriep
2019-04-12 13:35:23 +08:00
Weijun Wang
61485b75a9 8221257: Improve serial number generation mechanism for keytool -gencert
Reviewed-by: xuelei, mullan
2019-03-30 16:32:23 +08:00
John Jiang
3c34b7a261 8220410: sun/security/tools/jarsigner/warnings/NoTimestampTest.java failed with missing expected output
Using the same timezone for jar verifying and date formatting

Reviewed-by: weijun
2019-03-19 10:36:24 +08:00
Jesper Wilhelmsson
cda0d67617 Merge 2019-01-16 20:53:09 +01:00
Weijun Wang
1d014da14b 8215694: keytool cannot generate RSASSA-PSS certificates
Reviewed-by: xuelei
2019-01-16 11:25:55 +08:00
Weijun Wang
af43646ba3 8215922: jar spec is not precise when describing jar file re-signing
Reviewed-by: lancea, mullan
2019-01-15 11:21:00 +08:00
John Jiang
017c702b8a 8214937: sun/security/tools/jarsigner/warnings/NoTimestampTest.java failed due to unexpected expiration date
Reviewed-by: xuelei
2018-12-13 12:34:35 +08:00
Weijun Wang
9136c7d1d0 8076190: Customizing the generation of a PKCS12 keystore
Reviewed-by: mullan
2018-12-13 11:16:33 +08:00
Sean Coffey
441d285620 8213952: Relax DNSName restriction as per RFC 1123
Reviewed-by: weijun, mullan, chegar
2018-12-05 17:33:01 +00:00
Weijun Wang
320616a865 8214179: Add groupname info into keytool -list and -genkeypair output
Reviewed-by: mullan
2018-12-01 21:58:05 +08:00
Weijun Wang
b1c4b461f1 8214100: use of keystore probing results in unnecessary exception thrown
Reviewed-by: mullan
2018-11-27 08:51:20 +08:00
Weijun Wang
c20332c412 8212003: Deprecating the default keytool -keyalg option
Reviewed-by: mullan, xuelei
2018-11-17 18:11:23 +08:00
Weijun Wang
65dc116bf6 8213400: Support choosing group name in keytool keypair generation
Reviewed-by: apetcher, xuelei
2018-11-14 08:46:25 +08:00
John Jiang
afe05800ac 8209546: Make sun/security/tools/keytool/autotest.sh to support macosx
Refactor autotest.sh to java test and remove standard.sh

Reviewed-by: weijun
2018-09-28 15:42:20 +08:00
Igor Ignatyev
2702b5c299 8182404: remove jdk.testlibrary.JDKToolFinder and JDKToolLauncher
Reviewed-by: amenkov, jcbeyler, alanb
2018-09-10 14:23:37 -07:00
Igor Ignatyev
21a0458422 8210112: remove jdk.testlibrary.ProcessTools
Reviewed-by: alanb, sspitsyn, jcbeyler
2018-09-07 14:01:52 -07:00
Mikael Vidstedt
95db6924f2 Merge 2018-08-20 14:19:30 -07:00
John Jiang
eae535f70e 8209537: Two security tests failed after JDK-8164639 due to dependency was missed
Skip sun/security/tools/keytool/autotest.sh on macosx and add /test/lib to sun/security/ec/TestEC.java

Reviewed-by: rhalade
2018-08-16 02:00:31 +08:00
John Jiang
5074bbb767 8206443: Update security libs manual test to cope with removal of javac -source/-target 6
Change compile -source/-target from 1.6 to 1.7

Reviewed-by: xuelei
2018-07-14 07:31:26 +08:00
Dan Zhou
9519826624 8194152: sun/security/tools/jarsigner/AltProvider.java failed on de-DE locale
Reviewed-by: naoto
2018-06-25 20:08:05 -07:00
Dan Zhou
90329292ce 8196213: sun/security/tools/jarsigner/warnings/NoTimestampTest.java test fails on ar_SA locale
Reviewed-by: naoto
2018-06-25 20:03:46 -07:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Jan Lahoda
78b7362c97 8193302: Javac AssertionError: typeSig ERROR on usage of @Generated
Importing from an invisible package whose name is a prefix of a visible package is not allowed.

Reviewed-by: vromero
2018-06-13 12:52:21 +02:00
Weijun Wang
8b1470f8e7 8202816: Update JarSigning.keystore
Reviewed-by: xuelei
2018-05-09 09:50:25 +08:00
Bhanu Prakash Gopularam
a3ed7dd7d6 8144806: sun/security/tools/keytool/standard.sh fails intermittently at deleting x.jks
Reviewed-by: weijun
2018-04-25 12:29:48 +05:30
Philipp Kunz
5db337db24 6372077: JarFile.getManifest() should handle manifest attribute name 70 bytes
Reviewed-by: alanb, sherman
2018-03-01 15:50:26 -05:00
Weijun Wang
06a9e1a72f 8191438: jarsigner should print when a timestamp will expire
Reviewed-by: mullan
2018-02-14 16:58:49 +08:00
Weijun Wang
48aad3bd2f 8196823: jarsigner should not create a signed jar if the signing fails
Reviewed-by: mullan, alanb
2018-02-08 11:44:21 +08:00
Joe Darcy
0b40438ae8 8194070: Update various tests to pass under JDK 11
Reviewed-by: alanb, sherman, psandoz
2018-01-31 11:25:34 -08:00
Goetz Lindenmaier
0480f69dd5 8194869: [TESTBUG][aix, s390] Adapt tests to platforms
Reviewed-by: mbaesken, simonis, dholmes, serb
2018-01-18 10:26:39 +01:00
Weijun Wang
b01627c0e4 8192988: keytool should support -storepasswd for pkcs12 keystores
Reviewed-by: mullan
2017-12-14 20:19:34 +08:00
Weijun Wang
67205081ec 8192987: keytool should remember real storetype if it is not provided
Reviewed-by: mullan
2017-12-08 09:40:14 +08:00
Weijun Wang
c4bab8bce7 8190674: sun/security/tools/jarsigner/TimestampCheck.java failed with java.nio.file.NoSuchFileException: ts2.cert
Reviewed-by: mullan
2017-12-05 17:19:48 +08:00
Weijun Wang
69db146335 8180289: jarsigner treats timestamped signed jar invalid after the signer cert expires
Reviewed-by: mullan
2017-10-27 21:11:15 +08:00
Weijun Wang
7cf3c0ff14 8182879: Add warnings to keytool when using JKS and JCEKS
Reviewed-by: vinnie, ahgross, mullan
2017-07-12 10:55:40 +08:00
Philipp Kunz
2ae9614d34 6695402: Jarsigner with multi-byte characters in class names
Reviewed-by: weijun
2017-09-27 14:02:15 +08:00
Weijun Wang
2bb3b82709 8148371: Remove policytool
Reviewed-by: erikj, alanb, mullan
2017-09-21 16:29:18 +08:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00