Commit Graph

659 Commits

Author SHA1 Message Date
Bill Huang
375bfac8e7 8327474: Review use of java.io.tmpdir in jdk tests
Reviewed-by: michaelm, jpai
2024-04-03 17:04:09 +00:00
Sean Coffey
3b582dff84 8051959: Add thread and timestamp options to java.security.debug system property
Reviewed-by: mullan, weijun
2024-04-02 08:51:13 +00:00
Martin Balao
13cf0707f9 8328556: Do not extract large CKO_SECRET_KEY keys from the NSS Software Token
Reviewed-by: djelinski
2024-03-22 15:28:05 +00:00
Weijun Wang
569b05addf 8327818: Implement Kerberos debug with sun.security.util.Debug
Reviewed-by: coffeys, ssahoo
2024-03-18 15:36:28 +00:00
Daniel Jeliński
8f9899b23e 8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode
Reviewed-by: valeriep
2024-03-13 19:09:52 +00:00
Hai-May Chao
ffd43c922e 8327461: KeyStore getEntry is not thread-safe
Reviewed-by: djelinski, weijun
2024-03-11 16:33:17 +00:00
Sean Mullan
c4845f01d2 8317431: Implement simpler Comparator when building certification paths
Reviewed-by: kdriver, weijun
2024-03-08 15:20:37 +00:00
Eirik Bjørsnøs
e9adcebaf2 8327208: Remove unused method java.util.jar.Manifest.make72Safe
Reviewed-by: lancea, iris, jpai
2024-03-05 08:39:43 +00:00
Matthew Donovan
430290066c 8319673: Few security tests ignore VM flags
Reviewed-by: weijun, hchao
2024-02-29 12:08:14 +00:00
Weijun Wang
b87d9cf2c9 8325506: Ensure randomness is only read from provided SecureRandom object
Reviewed-by: kdriver, valeriep
2024-02-26 21:52:40 +00:00
Anthony Scarpino
f62b5789ad 8311644: Server should not send bad_certificate alert when the client does not send any certificates
Reviewed-by: djelinski, jjiang, ssahoo
2024-02-26 16:49:01 +00:00
Rajan Halade
f3073db42a 8321408: Add Certainly roots R1 and E1
Reviewed-by: ascarpino, hchao
2024-02-16 18:07:53 +00:00
Ben Perez
244573e719 8265372: Simplify PKCS9Attribute
Reviewed-by: weijun
2024-02-16 14:51:31 +00:00
Matthew Donovan
b6233c3de7 8321925: sun/security/mscapi/KeytoolChangeAlias.java fails with "Alias <246810> does not exist"
Reviewed-by: rhalade
2024-01-18 17:33:31 +00:00
John Jiang
43d2d68da5 8320449: ECDHKeyAgreement should validate parameters before using them
Reviewed-by: mullan
2024-01-16 22:54:45 +00:00
Matthew Donovan
c2e77e2f17 8319128: sun/security/pkcs11 tests fail on OL 7.9 aarch64
Reviewed-by: mbaesken
2024-01-11 15:19:48 +00:00
Stefan Karlsson
cbe329b90a 8321713: Harmonize executeTestJvm with create[Limited]TestJavaProcessBuilder
Reviewed-by: lkorinth, lmesnik
2024-01-03 08:53:01 +00:00
Weijun Wang
424c58f3e9 8187634: keystore.getCertificateAlias(cert) returns original alias, inconsistent with fix of JDK-6483657
Reviewed-by: mullan
2023-12-20 15:45:33 +00:00
Weijun Wang
45a9ade337 8202598: keytool -certreq output contains inconsistent line separators
Reviewed-by: hchao, mullan
2023-12-14 14:37:15 +00:00
Weijun Wang
11e4a925be 8320597: RSA signature verification fails on signed data that does not encode params correctly
Reviewed-by: mullan, valeriep
2023-12-07 23:25:56 +00:00
Gregor Purdy
949846986f 8318983: Fix comment typo in PKCS12Passwd.java
Reviewed-by: weijun
2023-12-02 21:13:37 +00:00
Weijun Wang
0a60b0f99e 8302233: HSS/LMS: keytool and jarsigner changes
Reviewed-by: mullan
2023-11-30 19:14:29 +00:00
Matthew Donovan
6ce0ebb858 8295343: sun/security/pkcs11 tests fail on Linux RHEL 8.6 and newer
Reviewed-by: erikj, ihse, valeriep
2023-11-22 13:00:56 +00:00
Weijun Wang
2b4e99140a 8320208: Update Public Suffix List to b5bf572
Reviewed-by: mullan
2023-11-20 19:20:06 +00:00
Sean Mullan
a2c0fa6f9c 8320372: test/jdk/sun/security/x509/DNSName/LeadingPeriod.java validity check failed
Reviewed-by: alanb
2023-11-20 17:47:48 +00:00
Rajan Halade
0bda467f6e 8319187: Add three eMudhra emSign roots
Reviewed-by: mullan
2023-11-15 18:33:40 +00:00
Rajan Halade
0ea58048f9 8318759: Add four DigiCert root certificates
Reviewed-by: mullan
2023-11-14 17:29:28 +00:00
Kevin Driver
1696603ccd 8308453: Convert JKS test keystores in test/jdk/javax/net/ssl/etc to PKCS12
Reviewed-by: weijun
2023-11-06 15:07:03 +00:00
Weijun Wang
84f4f7477c 8319213: Compatibility.java reads both stdout and stderr of JdkUtils
Reviewed-by: rhalade
2023-11-02 17:39:34 +00:00
Rajan Halade
e6f46a4326 8317374: Add Let's Encrypt ISRG Root X2
Reviewed-by: mullan
2023-11-02 16:38:13 +00:00
Ben Perez
bfaf5704e7 8311546: Certificate name constraints improperly validated with leading period
Reviewed-by: mullan
2023-11-01 16:49:50 +00:00
Matthew Donovan
3e39d7b34c 8319136: Skip pkcs11 tests on linux-aarch64
Reviewed-by: rhalade
2023-10-31 13:28:41 +00:00
Leo Korinth
d52a995f35 8315097: Rename createJavaProcessBuilder
Reviewed-by: lmesnik, dholmes, rriggs, stefank
2023-10-27 08:47:26 +00:00
Weijun Wang
1ddf826aea 8316964: Security tools should not call System.exit
Reviewed-by: valeriep
2023-10-24 18:32:01 +00:00
Rajan Halade
d3ebb4a155 8317373: Add Telia Root CA v2
Reviewed-by: mullan
2023-10-20 18:25:09 +00:00
Matthew Donovan
2a80160960 8314283: Support for NSS tests on aarch64 platforms
Reviewed-by: rhalade
2023-10-11 16:44:22 +00:00
Mark Powers
8c0d026d0f 8315042: NPE in PKCS7.parseOldSignedData
Reviewed-by: valeriep, weijun
2023-10-04 00:23:42 +00:00
Mark Powers
6e1aacdfba 8296631: NSS tests failing on OL9 linux-aarch64 hosts
Reviewed-by: valeriep
2023-10-02 22:43:48 +00:00
Weijun Wang
d2e2c4cef1 8309667: TLS handshake fails because of ConcurrentModificationException in PKCS12KeyStore.engineGetEntry
Reviewed-by: djelinski, mullan
2023-10-02 21:53:12 +00:00
Weijun Wang
d7d1d42b67 8316771: Krb5.java has not defined messages for all error codes
Reviewed-by: mullan
2023-10-02 19:55:22 +00:00
Weijun Wang
f985006142 8309356: Read files in includedir in alphanumeric order
Reviewed-by: mullan
2023-10-02 18:12:06 +00:00
Michal Sobierski
59847926b6 8316415: Parallelize sun/security/rsa/SignedObjectChain.java subtests
Reviewed-by: shade, rhalade, valeriep
2023-10-02 09:56:14 +00:00
Daniel Jeliński
fee9d3362c 8293176: SSLEngine handshaker does not send an alert after a bad parameters
Reviewed-by: mdonovan, jnimeh
2023-09-27 07:33:52 +00:00
Matthias Baesken
1f7dfda705 8316671: sun/security/ssl/SSLSocketImpl/SSLSocketCloseHang.java test fails intermittent with Read timed out
Reviewed-by: lucy
2023-09-26 14:01:45 +00:00
Ian Myers
0f77d250b6 8315684: Parallelize sun/security/util/math/TestIntegerModuloP.java
Reviewed-by: shade, weijun
2023-09-25 13:12:41 +00:00
Sean Mullan
c698b45a7b 8313229: DHEKeySizing.java should be modified to use TLS versions TLSv1, TLSv1.1, TLSv1.2
Reviewed-by: jnimeh
2023-09-21 17:31:46 +00:00
Matthias Baesken
aa0ebeedb1 8316341: sun/security/pkcs11/PKCS11Test.java needs adjustment on Linux ppc64le Ubuntu 22
Reviewed-by: lucy, clanger
2023-09-18 07:01:48 +00:00
Erik Joelsson
020255a72d 8267174: Many test files have the wrong Copyright header
Reviewed-by: valeriep, aivanov, iris, dholmes, ihse
2023-09-12 20:16:05 +00:00
Rajan Halade
7a08e6bdd6 8313575: Refactor PKCS11Test tests
Reviewed-by: valeriep
2023-09-05 23:08:25 +00:00
Rajan Halade
939d7c5d84 8161536: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java fails with ProviderException
Reviewed-by: mullan
2023-09-05 17:51:12 +00:00
Matthias Baesken
8bbebbba8f 8315644: increase timeout of sun/security/tools/jarsigner/Warning.java
Reviewed-by: clanger, lucy
2023-09-05 07:06:37 +00:00
Valerie Peng
1c598c2245 8312428: PKCS11 tests fail with NSS 3.91
Reviewed-by: ssahoo, rhalade
2023-08-29 22:08:34 +00:00
Daniel Jeliński
12de9b0225 8314148: Fix variable scope in SunMSCAPI
Reviewed-by: valeriep
2023-08-28 05:27:25 +00:00
Rajan Halade
e9ba8d5a0e 8314960: Add Certigna Root CA - 2
Reviewed-by: mullan
2023-08-25 18:17:27 +00:00
Valerie Peng
ba6cdbe2c2 8309214: sun/security/pkcs11/KeyStore/CertChainRemoval.java fails after 8301154
Reviewed-by: mbaesken, jnimeh
2023-08-22 23:49:03 +00:00
Ben Perez
f143380d01 8314240: test/jdk/sun/security/pkcs/pkcs7/SignerOrder.java fails to compile
Reviewed-by: mullan
2023-08-16 19:56:13 +00:00
Xue-Lei Andrew Fan
79be8d9383 8312259: StatusResponseManager unused code clean up
Reviewed-by: mpowers, jnimeh
2023-08-10 17:15:56 +00:00
Rajan Halade
515add88ed 8313206: PKCS11 tests silently skip execution
Reviewed-by: ssahoo, mullan
2023-08-08 20:21:16 +00:00
Valerie Peng
c27c87786a 8302017: Allocate BadPaddingException only if it will be thrown
Reviewed-by: xuelei
2023-07-27 21:24:03 +00:00
Matthew Donovan
8042a50b99 8309305: sun/security/ssl/SSLSocketImpl/BlockedAsyncClose.java fails with jtreg test timeout
Reviewed-by: djelinski
2023-07-21 14:45:59 +00:00
Daniel Jeliński
354c6605e3 8307185: pkcs11 native libraries make JNI calls into java code while holding GC lock
Reviewed-by: alanb, valeriep
2023-07-20 16:39:17 +00:00
Jamil Nimeh
282a93a4cc 8300285: Enhance TLS data handling
Reviewed-by: ahgross, ascarpino, rhalade
2023-07-18 21:17:06 +00:00
Anthony Scarpino
e737968792 8308398: Move SunEC crypto provider into java.base
Reviewed-by: valeriep, alanb
2023-07-17 17:38:54 +00:00
Rajan Halade
119cc495fc 8156889: ListKeychainStore.sh fails in some virtualized environments
Reviewed-by: mullan
2023-07-12 18:15:20 +00:00
Rajan Halade
fd7fddb6ed 8295894: Remove SECOM certificate that is expiring in September 2023
Reviewed-by: xuelei, mullan
2023-07-11 23:53:40 +00:00
Weijun Wang
e624484ecf 8308540: On Kerberos TGT referral, if krb5.conf is missing realm, bad exception message
Reviewed-by: xuelei
2023-06-26 15:55:36 +00:00
Ben Perez
7628da2008 8279254: PKCS9Attribute SigningTime always encoded in UTFTime
Reviewed-by: jnimeh
2023-06-23 15:31:16 +00:00
Jamil Nimeh
5ca4cdd2ca 8309740: Expand timeout windows for tests in JDK-8179502
Reviewed-by: xuelei, mbaesken
2023-06-23 14:52:12 +00:00
Matthew Donovan
130a9f1387 8292704: sun/security/tools/jarsigner/compatibility/Compatibility.java use wrong key size for EC
Reviewed-by: rhalade
2023-06-22 18:43:27 +00:00
Ben Perez
4eb4f20ae2 8308808: SunMSCAPI public keys returns internal key array
Reviewed-by: mullan
2023-06-16 16:46:54 +00:00
Ben Perez
bed9161c81 8308474: DSA does not reset SecureRandom when initSign is called again
Reviewed-by: weijun
2023-06-13 16:34:58 +00:00
Kevin Driver
80edd5c298 8294985: SSLEngine throws IAE during parsing of X500Principal
Reviewed-by: wetmore, xuelei, mullan
2023-06-09 23:31:12 +00:00
Martin Balao
4a75fd462c 8301553: Support Password-Based Cryptography in SunPKCS11
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@redhat.com>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep
2023-06-06 19:39:34 +00:00
Mark Powers
d987176412 8307794: Test for HSS/LMS Signature Verification
Reviewed-by: mullan
2023-06-01 14:09:36 +00:00
Valerie Peng
7891de331a 8297885: misc sun/security/pkcs11 tests timed out
Reviewed-by: xuelei
2023-05-30 17:50:53 +00:00
Jamil Nimeh
2836c34b64 8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts
Reviewed-by: mullan
2023-05-23 21:32:28 +00:00
Valerie Peng
6b27dad76e 8301154: SunPKCS11 KeyStore deleteEntry results in dangling PrivateKey entries
Reviewed-by: weijun, hchao
2023-05-23 21:11:38 +00:00
Weijun Wang
148df533af 8308010: X509Key and PKCS8Key allows garbage bytes at the end
Reviewed-by: mullan
2023-05-18 21:23:29 +00:00
Matthias Baesken
5a92aae1d9 8308156: VerifyCACerts.java misses blank in error output
Reviewed-by: mullan, rhalade
2023-05-17 06:42:19 +00:00
Matthew Donovan
5842fd5beb 8306015: Update sun.security.ssl TLS tests to use SSLContextTemplate or SSLEngineTemplate
Reviewed-by: xuelei
2023-05-09 14:25:40 +00:00
Jiangli Zhou
03030d47eb 8307134: Add GTS root CAs
Co-authored-by: Andy Warner <awarner@google.com>
Co-authored-by: Rajan Halade <rhalade@openjdk.org>
Reviewed-by: mullan, rhalade
2023-05-03 21:09:22 +00:00
Rajan Halade
c7e1df8328 8304760: Add 2 Microsoft TLS roots
Reviewed-by: mullan
2023-05-01 18:03:54 +00:00
Rajan Halade
82ccfe3a21 8305975: Add TWCA Global Root CA
Reviewed-by: mullan
2023-04-28 16:18:02 +00:00
Weijun Wang
01b8512911 8302182: Update Public Suffix List to 88467c9
Reviewed-by: mullan
2023-04-26 17:30:22 +00:00
Matthew Donovan
39398075b7 8182621: JSSE should reject empty TLS plaintexts
Reviewed-by: xuelei
2023-04-11 04:21:17 +00:00
Weijun Wang
97276859ab 8305310: Calculate PublicKey from PrivateKey
Reviewed-by: mullan
2023-04-10 00:55:16 +00:00
Matthew Donovan
824a5e4c60 8284047: Harmonize/Standardize the SSLSocket/SSLEngine/SSLSocketSSLEngine test templates
Reviewed-by: rhalade
2023-03-15 17:39:11 +00:00
Jamil Nimeh
da044dd569 8300939: sun/security/provider/certpath/OCSP/OCSPNoContentLength.java fails due to network errors
Reviewed-by: djelinski, weijun
2023-03-14 15:42:47 +00:00
Eirik Bjorsnos
31680b2bcf 8303410: Remove ContentSigner APIs and jarsigner -altsigner and -altsignerpath options
Reviewed-by: weijun
2023-03-14 11:48:59 +00:00
Rajan Halade
5b43804b79 8282201: Consider removal of expiry check in VerifyCACerts.java test
Reviewed-by: xuelei, mullan
2023-03-08 21:09:44 +00:00
Pavel Rappo
45a616a891 8303480: Miscellaneous fixes to mostly invisible doc comments
Reviewed-by: mullan, prr, cjplummer, aivanov, jjg, lancea, rriggs, ihse
2023-03-07 15:31:42 +00:00
Weijun Wang
a97271e3b5 8301793: AlgorithmId should not encode a missing parameters field as NULL unless hardcoded
Reviewed-by: mullan
2023-03-06 16:20:14 +00:00
Valerie Peng
394eac850c 8295425: Match the default priv exp length between SunPKCS11 and other JDK providers
Reviewed-by: weijun
2023-03-01 22:40:50 +00:00
Sean Mullan
26b111d714 8301700: Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
Reviewed-by: xuelei
2023-02-15 13:25:50 +00:00
Rajan Halade
8c87a67419 8245654: Add Certigna Root CA
Reviewed-by: mullan
2023-02-09 20:48:37 +00:00
Weijun Wang
b56974209b 8301788: AlgorithmId should keep lowercase characters from 3rd party providers
Reviewed-by: mullan
2023-02-06 17:10:46 +00:00
Sibabrata Sahoo
7f313b0cef 8180266: Convert sun/security/provider/KeyStore/DKSTest.sh to Java Jtreg Test
Reviewed-by: rhalade
2023-02-03 05:19:47 +00:00
Hai-May Chao
b00b70c240 8286907: keytool should warn about weak PBE algorithms
Reviewed-by: mullan, weijun
2023-02-02 21:17:08 +00:00
Jamil Nimeh
1a3cb8c501 8296343: CPVE thrown on missing content-length in OCSP response
Reviewed-by: mullan, rhalade
2023-01-23 18:05:48 +00:00
Weijun Wang
b317658d69 8300399: EdDSA does not verify when there is no message
Reviewed-by: ascarpino
2023-01-19 18:32:08 +00:00