Commit Graph

48 Commits

Author SHA1 Message Date
Sean Mullan
ad82a519a8 8168313: Tighten permissions granted to jdk.crypto.pkcs11 module
Reviewed-by: ascarpino
2016-10-21 09:02:57 -04:00
Valerie Peng
81d15be0db 8165275: Replace the reflective call to the implUpdate method in HandshakeMessage::digestKey
Replaced the reflection calls with the new sun.security.util.MessageDigestSpi2 interface

Reviewed-by: xuelei, mchung
2016-10-11 00:04:35 +00:00
Valerie Peng
dc417a73f7 6946830: javax.crypto.Cipher.doFinal behavior differs depending on platform
Updated OracleUcrypto and SunPKCS11 providers with SunJCE provider behavior

Reviewed-by: xuelei
2016-09-28 03:18:01 +00:00
Valerie Peng
5f41b5fad7 8149802: Signature.verify() doesn't reset the signature object on exception
Ensure the signature object is always reset after verify() is called.

Reviewed-by: xuelei
2016-09-28 03:10:37 +00:00
Valerie Peng
8d4f1ae8df 8136355: CKM_SSL3_KEY_AND_MAC_DERIVE no longer available by default on Solaris 12
Enhanced to detect and throw InvalidAlgorithmParameterException if SSLv3 is requested but unsupported

Reviewed-by: xuelei
2016-09-23 01:08:24 +00:00
Alan Burlison
4e8fe41e35 8165161: Solaris: /usr/ccs /opt/sfw and /opt/csw are dead, references should be expunged
Reviewed-by: rriggs, erikj
2016-09-21 14:22:11 +02:00
Anthony Scarpino
0edc4fa72d 8074838: Resolve disabled warnings for libj2pkcs11
Reviewed-by: wetmore, erikj
2016-08-26 09:57:36 -07:00
Sean Coffey
dde76394d5 8150530: Improve javax.crypto.BadPaddingException messages
Reviewed-by: xuelei
2016-08-24 17:57:20 +01:00
Valerie Peng
55b1ffa690 8078661: [SunPKCS11] Fails to cast into RSAPrivateCrtKey after RSA KeyPair Generation
Changed to check all components instead of only the public exponent for RSA CRT key determination

Reviewed-by: vinnie
2016-08-19 23:24:23 +00:00
Chris Hegarty
2f2de77c1d 8156841: sun.security.pkcs11.SunPKCS11 poller thread retains a strong reference to the context class loader
Reviewed-by: dfuchs, jnimeh, valeriep
2016-08-19 18:06:46 +01:00
Valerie Peng
c846a862ee 8130181: Deprecate java.security.Provider(String, double, String), add Provider(Strin
Added Provider constructor which uses version String and use sun.security.util.PROVIDER_VER

Reviewed-by: weijun
2016-08-19 06:27:54 +00:00
Vinnie Ryan
149b8bf45d 8161571: Verifying ECDSA signatures permits trailing bytes
Reviewed-by: xuelei
2016-07-22 16:05:23 +01:00
Artem Smotrakov
f2b622bfb3 8074580: sun/security/pkcs11/rsa/TestKeyPairGenerator.java fails due to PKCS11Exception: CKR_FUNCTION_FAILED
Reviewed-by: valeriep
2016-06-22 15:58:08 -07:00
Joe Darcy
01ee88c8ae 6850612: Deprecate Class.newInstance since it violates the checked exception language contract
Reviewed-by: lancea, mullan, dfuchs
2016-05-03 10:40:54 -07:00
Valerie Peng
89499e85db 8153371: Remove sun.misc.ManagedLocalsThread from jdk.crypto.pkcs11
Replace usage of ManagedLocalsThread with the new Thread constructor

Reviewed-by: xuelei, chegar
2016-04-19 22:25:41 +00:00
Xue-Lei Andrew Fan
7f30460ff6 8072452: Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits
Reviewed-by: valeriep, mullan, coffeys
2016-04-15 11:09:18 +00:00
Chris Hegarty
25b68378f6 8153737: Unsupported Module
Reviewed-by: alanb, mchung, psandoz
2016-04-09 20:12:13 +01:00
Anthony Scarpino
657cfea401 8098580: drainRefQueueBounds() puts pressure on pool.size()
Reviewed-by: valeriep
2016-04-05 11:48:30 -07:00
Alan Bateman
db4d383614 8142968: Module System implementation
Initial integration of JEP 200, JEP 260, JEP 261, and JEP 282

Co-authored-by: Alex Buckley <alex.buckley@oracle.com>
Co-authored-by: Jonathan Gibbons <jonathan.gibbons@oracle.com>
Co-authored-by: Karen Kinnear <karen.kinnear@oracle.com>
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Chris Hegarty <chris.hegarty@oracle.com>
Co-authored-by: Alexandr Scherbatiy <alexandr.scherbatiy@oracle.com>
Co-authored-by: Amy Lu <amy.lu@oracle.com>
Co-authored-by: Calvin Cheung <calvin.cheung@oracle.com>
Co-authored-by: Daniel Fuchs <daniel.fuchs@oracle.com>
Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com>
Co-authored-by: Harold Seigel <harold.seigel@oracle.com>
Co-authored-by: Jaroslav Bachorik <jaroslav.bachorik@oracle.com>
Co-authored-by: Jean-Francois Denise <jean-francois.denise@oracle.com>
Co-authored-by: Jan Lahoda <jan.lahoda@oracle.com>
Co-authored-by: James Laskey <james.laskey@oracle.com>
Co-authored-by: Lois Foltan <lois.foltan@oracle.com>
Co-authored-by: Miroslav Kos <miroslav.kos@oracle.com>
Co-authored-by: Huaming Li <huaming.li@oracle.com>
Co-authored-by: Sean Mullan <sean.mullan@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Masayoshi Okutsu <masayoshi.okutsu@oracle.com>
Co-authored-by: Peter Levart <peter.levart@gmail.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Claes Redestad <claes.redestad@oracle.com>
Co-authored-by: Sergey Bylokhov <sergey.bylokhov@oracle.com>
Co-authored-by: Alexandre Iline <alexandre.iline@oracle.com>
Co-authored-by: Volker Simonis <volker.simonis@gmail.com>
Co-authored-by: Staffan Larsen <staffan.larsen@oracle.com>
Co-authored-by: Stuart Marks <stuart.marks@oracle.com>
Co-authored-by: Semyon Sadetsky <semyon.sadetsky@oracle.com>
Co-authored-by: Serguei Spitsyn <serguei.spitsyn@oracle.com>
Co-authored-by: Sundararajan Athijegannathan <sundararajan.athijegannathan@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Vincent Ryan <vincent.x.ryan@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Co-authored-by: Yuri Nesterenko <yuri.nesterenko@oracle.com>
Co-authored-by: Yekaterina Kantserova <yekaterina.kantserova@oracle.com>
Co-authored-by: Alexander Kulyakthin <alexander.kulyakhtin@oracle.com>
Co-authored-by: Felix Yang <felix.yang@oracle.com>
Co-authored-by: Andrei Eremeev <andrei.eremeev@oracle.com>
Co-authored-by: Frank Yuan <frank.yuan@oracle.com>
Co-authored-by: Sergei Pikalev <sergei.pikalev@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Tiantian Du <tiantian.du@oracle.com>
Co-authored-by: Sha Jiang <sha.jiang@oracle.com>
Reviewed-by: alanb, mchung, naoto, rriggs, psandoz, plevart, mullan, ascarpino, vinnie, prr, sherman, dfuchs, mhaupt
2016-03-17 19:04:16 +00:00
Sean Mullan
e868165acc 8138653: Default key sizes for the AlgorithmParameterGenerator and KeyPairGenerator implementations should be upgraded
Reviewed-by: coffeys, vinnie
2016-03-07 10:10:04 -05:00
Anthony Scarpino
719c597241 8098581: SecureRandom.nextBytes() hurts performance with small size requests
Reviewed-by: valeriep
2016-02-08 13:09:16 -08:00
Ivan Gerasimov
57e9de3136 8134605: Partial rework of the fix for 8081297
Reviewed-by: xuelei, coffeys, valeriep
2015-10-02 11:50:20 +03:00
Iris Clark
b1b246fa7b Merge 2015-11-19 14:00:49 -08:00
Iris Clark
b7cb99d927 Merge 2015-10-25 19:16:39 -07:00
Bob Vandette
3dc2d02585 8136556: Add the ability to perform static builds of MacOSX x64 binaries
Reviewed-by: ihse, bdelsart, gadams, lfoltan, rriggs, hseigel, twisti
2015-10-19 13:41:09 -04:00
Valerie Peng
fcb924e751 8130648: JCK test api/java_security/AuthProvider/ProviderTests_login starts failing after JDK-7191662
Make uninitialized SunPKCS11 provider throw IllegalStateException for AuthProvider calls.

Reviewed-by: mullan
2015-10-08 20:51:08 +00:00
Iris Clark
d0bbb6c588 Merge 2015-09-29 11:46:31 -07:00
Artem Smotrakov
f1f48ab0d3 8134232: KeyStore.load() throws an IOException with a wrong cause in case of wrong password
Reviewed-by: vinnie
2015-09-14 19:49:28 +03:00
Iris Clark
7c55ca4ce4 Merge 2015-08-25 14:45:26 -07:00
Iris Clark
8db18e0442 Merge 2015-08-17 13:02:48 -07:00
Volker Simonis
0ee85af4ec 8132551: Initialize local varibales before returning them in p11_convert.c
Reviewed-by: wetmore
2015-08-07 10:25:19 +02:00
Alexander Stepanov
48e1903790 8132130: some docs cleanup
Some docs cleanup

Reviewed-by: mullan
2015-07-31 15:07:18 +03:00
Iris Clark
636d3c2d95 Merge 2015-07-23 13:19:54 -07:00
Iris Clark
89a565ccd0 Merge 2015-07-20 11:01:24 -07:00
Iris Clark
3542628ec7 8130696: Security Providers need to have their version numbers updated for JDK 9
Reviewed-by: ascarpino, mullan, valeriep, weijun, wetmore
2015-07-20 09:40:49 -07:00
Ivan Gerasimov
82f8a14808 8130022: Use Java-style array declarations consistently
Reviewed-by: coffeys
2015-07-09 10:37:07 +03:00
Valerie Peng
5109058c5d 7191662: JCE providers should be located via ServiceLoader
Enhanced to use ServiceLoader and switched provider to Provider.Service model.

Reviewed-by: mullan, alanb, mchung
2015-06-26 21:34:34 +00:00
Valerie Peng
0f2e689f50 8042332: Enhance thread contexts in security libraries
Modified to use ManagedLocalsThread wherever applicable.

Reviewed-by: xuelei, skoivu
2015-04-03 23:01:17 +00:00
Valerie Peng
baceaab271 8074865: General crypto resilience changes
Replaced Arrays.equals() with MessageDigest.isEqual() when comparing sensitive values

Reviewed-by: mullan, xuelei
2015-04-06 20:24:27 +00:00
Sean Coffey
c189249408 8059588: deadlock in java/io/PrintStream when verbose javax.net.debug flags are set
Reviewed-by: mullan
2015-03-27 19:13:47 +00:00
Jason Uh
f7f4ab9df6 8042967: Add variant of DSA Signature algorithms that do not ASN.1 encode the signature bytes
Reviewed-by: mullan
2015-02-17 10:48:24 -08:00
Valerie Peng
dbe2f1349f Merge 2014-12-16 22:33:43 +00:00
Valerie Peng
86291780cb 8062170: java.security.ProviderException: Error parsing configuration with space
Updated to parse library path as a line which can contain quoted strings.

Reviewed-by: vinnie
2014-12-12 00:23:32 +00:00
Joe Darcy
c278cc80e9 8066638: Suppress deprecation warnings in jdk.crypto module
8066641: Suppress deprecation warnings in jdk.naming module

Reviewed-by: wetmore, xuelei, valeriep, lancea
2014-12-05 17:36:18 -08:00
Anthony Scarpino
1924ac8a18 8063700: -Xcheck:jni changes cause many JCK failures in api/javax_crypto tests in SunPKCS11
Reviewed-by: mullan, valeriep
2014-11-07 13:07:09 -08:00
Martin Buchholz
08eb67b941 8067377: My hobby: caning, then then canning, the the can-can
Fix ALL the stutters!

Reviewed-by: rriggs, mchung, lancea
2014-10-30 07:31:41 -07:00
Valerie Peng
0cade9c5f1 8039898: sunpkcs11-solaris.cfg should be in solaris specific directory
Move from src/java.base/share/conf/security/ to src/jdk.crypto.pkcs11/solaris/conf/security

Reviewed-by: erikj, ihse
2014-09-11 17:06:35 +00:00
Chris Hegarty
3bc69d393d 8054834: Modular Source Code
Co-authored-by: Alan Bateman <alan.bateman@oracle.com>
Co-authored-by: Alex Buckley <alex.buckley@oracle.com>
Co-authored-by: Erik Joelsson <erik.joelsson@oracle.com>
Co-authored-by: Jonathan Gibbons <jonathan.gibbons@oracle.com>
Co-authored-by: Karen Kinnear <karen.kinnear@oracle.com>
Co-authored-by: Magnus Ihse Bursie <magnus.ihse.bursie@oracle.com>
Co-authored-by: Mandy Chung <mandy.chung@oracle.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Paul Sandoz <paul.sandoz@oracle.com>
Reviewed-by: alanb, chegar, ihse, mduigou
2014-08-17 15:54:13 +01:00