29 Commits

Author SHA1 Message Date
Sean Mullan
5c30826657 Merge 2013-07-25 11:09:28 -04:00
Sean Mullan
74a0cc9f37 8010748: Add PKIXRevocationChecker NO_FALLBACK option and improve SOFT_FAIL option
Reviewed-by: vinnie
2013-07-25 10:58:00 -04:00
Vinnie Ryan
3300eed0bb 8019627: RuntimeException gets obscured during OCSP cert revocation checking
Reviewed-by: mullan
2013-07-12 20:44:34 +01:00
Vinnie Ryan
53ecefacac 8019259: Failover to CRL checking does not happen if wrong OCSP responder URL is set
Reviewed-by: xuelei
2013-07-01 14:39:47 +01:00
David Holmes
eb1726c151 Merge 2013-02-04 18:08:50 -05:00
Alan Bateman
a23a1a942b 8004502: Compact Profiles contents
Reviewed-by: dholmes, mchung
2013-01-21 23:35:36 -05:00
Alan Bateman
c12b624078 8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
Xue-Lei Andrew Fan
6d41a58c82 7109274: Restrict the use of certificates with RSA keys less than 1024 bits
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.

Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
Mark Sheppard
c9063f559f 8003890: corelibs test scripts should pass TESTVMOPTS
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
Sean Mullan
5b23307a8f 7171570: JEP 124 Potential API Changes
Reviewed-by: vinnie, xuelei
2012-11-05 10:30:49 -05:00
Sean Mullan
6ad27831e0 7176326: CertPath/CertPathBuilderTest failures after webrev 6854712_6637288_7126011
Reviewed-by: xuelei
2012-06-15 08:43:31 -04:00
Sean Mullan
14c586557e 6854712: Revocation checking enhancements (JEP-124)
6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE

Reviewed-by: xuelei
2012-05-30 17:19:46 -04:00
Weijun Wang
314c75c742 7020531: test: java/security/cert/CertificateFactory/openssl/OpenSSLCert.java file not closed after run
Reviewed-by: alanb, smarks
2011-03-01 16:22:22 +08:00
Sean Mullan
8676006f11 6994717: expired certificate in test ValidateCertPath
Reviewed-by: vinnie
2010-11-08 11:33:24 -05:00
Kelly O'Hair
f7e31fc6c2 6982137: Rebranding pass 2 - missed copyright changes
Reviewed-by: mbykov
2010-09-09 16:26:46 -07:00
Lana Steuck
fd45b4188c Merge 2010-05-28 12:10:14 -07:00
Kelly O'Hair
fe008ae27a 6943119: Rebrand source copyright notices
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
Weijun Wang
37ae69dba3 6948781: CertificateFactory.generateCertificate doesn't throw CertificateException for malformed certificate
Reviewed-by: mullan
2010-05-24 09:37:16 +08:00
Weijun Wang
512e4f93a3 6813340: X509Factory should not depend on is.available()==0
Reviewed-by: xuelei
2010-03-25 12:07:42 +08:00
Joe Darcy
c40412f4f4 6907177: Update jdk tests to remove unncessary -source and -target options
Reviewed-by: ohair
2009-12-03 18:19:10 -08:00
Xue-Lei Andrew Fan
5ba2fd7d33 6852744: PIT b61: PKI test suite fails because self signed certificates are beingrejected
Make the builder aware of SKID/AKID, break the internal circular dependences

Reviewed-by: mullan
2009-07-10 17:27:13 +08:00
Xue-Lei Andrew Fan
06370a8f01 6845286: Add regression test for name constraints
Create regression test cases on name constraints

Reviewed-by: weijun
2009-05-27 17:48:22 +08:00
Xue-Lei Andrew Fan
93614a3c7d 6720721: CRL check with circular depency support needed
Checking AKID of certificates and CRLs

Reviewed-by: mullan, weijun
2009-05-26 16:43:22 +08:00
Xue-Lei Andrew Fan
6a44e920f6 6383095: CRL revoked certificate failures masked by OCSP failures
Remove the mask if certificate revoked

Reviewed-by: mullan
2009-03-17 11:54:13 +08:00
Weijun Wang
7465090acf 6535697: keytool can be more flexible on format of PEM-encoded X.509 certificates
Reviewed-by: vinnie
2009-02-23 10:03:36 +08:00
Sean Mullan
cb4eb96188 6765046: CertPathValidatorException(Throwable).getMessage() always returns null since b37
Reviewed-by: vinnie
2008-11-06 12:12:39 -05:00
Sean Mullan
545b7e4f62 6465942: Add problem identification facility to the CertPathValidator framework
Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.

Reviewed-by: vinnie
2008-09-11 14:05:16 -04:00
Sean Mullan
f44f03f9ea 6714842: CertPathBuilder returns incorrect CertPath for BasicConstraints in builderParams
Do not consider CA target certificates if selector.getBasicConstraints() == -2

Reviewed-by: vinnie
2008-06-19 14:20:43 -04:00
J. Duke
319a3b9947 Initial load 2007-12-01 00:00:00 +00:00