Commit Graph

516 Commits

Author SHA1 Message Date
Anthony Scarpino
f17c68ce4a 8283577: SSLEngine.unwrap on read-only input ByteBuffer
Reviewed-by: wetmore
2022-05-17 21:39:11 +00:00
Mat Carter
5e5500cbd7 6782021: It is not possible to read local computer certificates with the SunMSCAPI provider
Reviewed-by: weijun
2022-05-17 02:41:36 +00:00
Weijun Wang
357f990e32 8286428: AlgorithmId should understand PBES2
Reviewed-by: valeriep
2022-05-15 22:31:14 +00:00
Weijun Wang
f4f1dddfef 8284194: Allow empty subject fields in keytool
Reviewed-by: jnimeh, hchao
2022-05-15 22:30:06 +00:00
Weijun Wang
752ad1c410 8286422: Add OIDs for RC2 and Blowfish
Reviewed-by: hchao, ascarpino
2022-05-12 13:27:45 +00:00
Weijun Wang
397d095f66 8285743: Ensure each IntegerPolynomial object is only created once
Reviewed-by: xuelei, ascarpino
2022-05-09 17:18:34 +00:00
Hai-May Chao
09e6ee96bd 8255552: Add DES/3DES/MD5 to jdk.security.legacyAlgorithms
Reviewed-by: mullan, weijun
2022-05-04 20:35:16 +00:00
Weijun Wang
075ce8a0d0 8286069: keytool prints out wrong key algorithm for -importpass command
Reviewed-by: hchao, valeriep
2022-05-04 02:56:18 +00:00
Xue-Lei Andrew Fan
ffca23a531 8284490: Remove finalizer method in java.security.jgss
Reviewed-by: rriggs, dfuchs, weijun
2022-05-03 14:14:09 +00:00
Weijun Wang
50a4df87c8 8286024: PKCS12 keystore shows "DES/CBC" as the algorithm of a DES SecretKeyEntry
Reviewed-by: valeriep
2022-05-02 22:37:32 +00:00
Weijun Wang
05ae7ed1aa 8284291: sun/security/krb5/auto/Renew.java fails intermittently on Windows 11
Reviewed-by: aturbanov, ascarpino
2022-04-20 18:57:55 +00:00
Andrey Turbanov
48c7549806 8284853: Fix various 'expected' typo
Reviewed-by: bpb, ihse
2022-04-14 18:05:49 +00:00
Naoto Sato
d6b4693c05 8283698: Refactor Locale constructors used in src/test
Reviewed-by: iris, joehw
2022-04-08 15:23:25 +00:00
Mark Powers
d6f01e9d6f 8234128: jarsigner will not show not-signed-by-alias warning if an intermediate cert is in this keystore
Reviewed-by: jnimeh
2022-04-07 15:52:43 +00:00
Mahendra Chhipa
ec73c61d8f 8284353: Update java/net and sun/net/www tests to eliminate dependency on sun.net.www.MessageHeader
Reviewed-by: dfuchs
2022-04-07 10:19:12 +00:00
Bradford Wetmore
0b09f70a73 8273553: sun.security.ssl.SSLEngineImpl.closeInbound also has similar error of JDK-8253368
Reviewed-by: xuelei, rhalade, coffeys
2022-04-02 00:30:48 +00:00
Olga Mikhaltsova
d8fd22239b 8282538: PKCS11 tests fail on CentOS Stream 9
Reviewed-by: mullan, xuelei
2022-03-28 19:27:26 +00:00
Valerie Peng
3b5dfee939 8283665: Two Jarsigner tests needs to be updated with JDK-8267319
Reviewed-by: xuelei, ascarpino, hchao, weijun
2022-03-25 17:10:59 +00:00
Valerie Peng
313bc7f64f 8267319: Use larger default key sizes and algorithms based on CNSA
Reviewed-by: weijun, xuelei
2022-03-24 22:50:26 +00:00
Sean Mullan
138460c004 8163327: Remove 3DES from the default enabled cipher suites list
Reviewed-by: xuelei
2022-03-23 18:32:55 +00:00
Sibabrata Sahoo
86015e15a5 8282293: Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
Reviewed-by: weijun, rhalade
2022-03-23 06:45:37 +00:00
Magnus Ihse Bursie
f8878cb0cc 8257733: Move module-specific data from make to respective module
Reviewed-by: jjg, weijun, naoto, erikj, prr, alanb, mchung
2022-03-21 21:34:09 +00:00
Hai-May Chao
f43ffe211f 8282633: jarsigner output does not explain why an EC key is disabled if its curve has been disabled
Reviewed-by: weijun
2022-03-15 15:54:47 +00:00
Mahendra Chhipa
95ca94436d 8282354: Remove dependancy of TestHttpServer, HttpTransaction, HttpCallback from open/test/jdk/ tests
Reviewed-by: dfuchs
2022-03-11 10:48:57 +00:00
Rajan Halade
ea19114e66 8282832: Update file path for HostnameMatcher/cert5.crt in test sun/security/util/Pem/encoding.sh
Reviewed-by: mullan
2022-03-08 20:34:02 +00:00
Sean Mullan
72e987e3b4 7192189: Support endpoint identification algorithm in RFC 6125
Reviewed-by: xuelei, rhalade
2022-03-08 18:18:57 +00:00
Matteo Baccan
ccad39237a 8282657: Code cleanup: removing double semicolons at the end of lines
Reviewed-by: lancea, rriggs, ihse, prr, iris, wetmore, darcy, dholmes
2022-03-07 21:33:40 +00:00
Hai-May Chao
fb6b929e6e 8277474: jarsigner does not check if algorithm parameters are disabled
Reviewed-by: mullan, weijun
2022-03-03 23:01:26 +00:00
Weijun Wang
fc918a73d0 8281234: The -protected option is not always checked in keytool and jarsigner
Reviewed-by: hchao, mullan
2022-03-02 14:07:26 +00:00
Weijun Wang
59b3ecc591 8277976: Break up SEQUENCE in X509Certificate::getSubjectAlternativeNames and X509Certificate::getIssuerAlternativeNames in otherName
6776681: Invalid encoding of an OtherName in X509Certificate.getAlternativeNames()

Reviewed-by: mullan
2022-02-28 17:00:47 +00:00
Rajan Halade
d3749de478 8277488: Add expiry exception for Digicert (geotrustglobalca) expiring in May 2022
Reviewed-by: weijun
2022-02-18 20:17:37 +00:00
Weijun Wang
7ce75afbbc 8255266: Update Public Suffix List to 3c213aa
Reviewed-by: xuelei
2022-02-18 16:34:59 +00:00
Alexey Bakhtin
58dae60da0 8274524: SSLSocket.close() hangs if it is called during the ssl handshake
Reviewed-by: xuelei
2022-02-12 11:54:22 +00:00
Hai-May Chao
178b962e01 8265765: DomainKeyStore may stop enumerating aliases if a constituting KeyStore is empty
Reviewed-by: weijun
2022-02-09 16:53:48 +00:00
Weijun Wang
2ed1f4cf32 8281175: Add a -providerPath option to jarsigner
Reviewed-by: xuelei, hchao
2022-02-07 15:05:30 +00:00
Jesper Wilhelmsson
7207f2a3b5 Merge 2022-02-04 14:47:06 +00:00
Matthias Baesken
01f93ddf18 8279385: [test] Adjust sun/security/pkcs12/KeytoolOpensslInteropTest.java after 8278344
Reviewed-by: mullan, xuelei
Backport-of: 9bdf6eb7b2
2022-02-04 07:47:42 +00:00
Michael McMahon
de3113b998 8279842: HTTPS Channel Binding support for Java GSS/Kerberos
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: dfuchs, weijun, darcy
2022-02-01 07:26:59 +00:00
Hai-May Chao
c2ee1b33c3 8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints
Reviewed-by: mullan
2022-01-26 20:31:04 +00:00
Weijun Wang
0d1a97f793 8279064: New options for ktab to provide non-default salt
Reviewed-by: valeriep
2022-01-14 20:44:22 +00:00
Weijun Wang
0a839b434b 8279801: EC KeyFactory and KeyPairGenerator do not have aliases for OID format
Reviewed-by: xuelei, valeriep
2022-01-13 15:26:41 +00:00
Jesper Wilhelmsson
d9b1bb5860 Merge 2022-01-10 17:06:23 +00:00
Matthias Baesken
06b4d494bf 8278344: sun/security/pkcs12/KeytoolOpensslInteropTest.java test fails because of different openssl output
Backport-of: 8b5ff4bdff
2022-01-10 11:41:14 +00:00
Weijun Wang
8d0f385fd0 8279520: SPNEGO has not passed channel binding info into the underlying mechanism
Reviewed-by: mullan, valeriep
2022-01-06 22:02:55 +00:00
Matthias Baesken
9bdf6eb7b2 8279385: [test] Adjust sun/security/pkcs12/KeytoolOpensslInteropTest.java after 8278344
Reviewed-by: weijun
2022-01-04 07:55:53 +00:00
Sergey Bylokhov
7fea10327e 8279134: Fix Amazon copyright in various files
Reviewed-by: xliu, phh
2021-12-26 22:10:54 +00:00
Daniel Jelinski
f31dead6c5 8279043: Some Security Exception Messages Miss Spaces
Reviewed-by: weijun
2021-12-21 18:24:31 +00:00
Weijun Wang
6412d57a0a 8278560: X509KeyManagerImpl::getAliases might return a good key with others
Reviewed-by: xuelei
2021-12-17 12:14:17 +00:00
Matthias Baesken
8b5ff4bdff 8278344: sun/security/pkcs12/KeytoolOpensslInteropTest.java test fails because of different openssl output
Reviewed-by: mdoerr, goetz, stuefe
2021-12-13 07:48:20 +00:00
Martin Balao
ea8d3c92c6 8271566: DSA signature length value is not accurate in P11Signature
Reviewed-by: valeriep
2021-12-06 20:31:55 +00:00
Weijun Wang
a729a70c01 8225181: KeyStore should have a getAttributes method
Reviewed-by: mullan
2021-12-03 18:52:17 +00:00
Weijun Wang
7049c13cf4 8231107: Allow store password to be null when saving a PKCS12 KeyStore
Reviewed-by: mullan
2021-12-01 01:01:57 +00:00
Weijun Wang
ab867f6c7c 8272162: S4U2Self ticket without forwardable flag
Reviewed-by: valeriep
2021-12-01 00:48:28 +00:00
Sean Mullan
03f8c0fb93 8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled
Reviewed-by: weijun
2021-11-19 14:36:07 +00:00
Sean Coffey
6bb04626af 8277224: sun.security.pkcs.PKCS9Attributes.toString() throws NPE
Reviewed-by: weijun
2021-11-17 20:50:46 +00:00
Weijun Wang
262d07001b 8277246: Check for NonRepudiation as well when validating a TSA certificate
Reviewed-by: xuelei, mullan
2021-11-17 20:03:55 +00:00
Weijun Wang
a5c160c711 8267108: Alternate Subject.getSubject and doAs APIs that do not depend on Security Manager APIs
Reviewed-by: mullan
2021-11-10 19:35:17 +00:00
Jamil Nimeh
8822d41fdc 8274736: Concurrent read/close of SSLSockets causes SSLSessions to be invalidated unnecessarily
Reviewed-by: xuelei, wetmore
2021-11-10 01:24:33 +00:00
Weijun Wang
c27afb313b 8276863: Remove test/jdk/sun/security/ec/ECDSAJavaVerify.java
Reviewed-by: ascarpino
2021-11-09 14:46:32 +00:00
Hai-May Chao
de93b1d0e8 8257722: Improve "keytool -printcert -jarfile" output
Reviewed-by: weijun
2021-10-28 23:04:34 +00:00
Weijun Wang
10e1610f7b 8251134: Unwrapping a key with a Private Key generated by Microsoft CNG fails
Reviewed-by: valeriep
2021-10-26 02:45:23 +00:00
Weijun Wang
43619458d1 8185844: MSCAPI doesn't list aliases correctly
Reviewed-by: valeriep
2021-10-26 02:39:05 +00:00
Hai-May Chao
fec470f262 8272163: Add -version option to keytool and jarsigner
Reviewed-by: weijun
2021-10-22 20:53:38 +00:00
Sean Mullan
49f9d8031e 8243585: AlgorithmChecker::check throws confusing exception when it rejects the signer key
Reviewed-by: ascarpino
2021-10-21 17:28:40 +00:00
Weijun Wang
d589b664cc 8270380: Change the default value of the java.security.manager system property to disallow
Reviewed-by: lancea, mullan, rriggs
2021-10-21 14:04:48 +00:00
Valerie Peng
e63c1486dc 8264849: Add KW and KWP support to PKCS11 provider
Reviewed-by: ascarpino
2021-10-19 20:50:56 +00:00
Weijun Wang
bd2b41dd70 8275252: Migrate cacerts from JKS to password-less PKCS12
Reviewed-by: erikj, ihse, mullan
2021-10-19 20:48:17 +00:00
Weijun Wang
8e02064288 8049520: FileCredentialsCache loads cache once and is never refreshed
Reviewed-by: mullan
2021-10-15 13:51:52 +00:00
Sean Coffey
03a8d342b8 8273826: Correct Manifest file name and NPE checks
Reviewed-by: weijun, hchao, mullan
2021-10-07 15:12:13 +00:00
Weijun Wang
03d3c03384 8273670: Remove weak etypes from default krb5 etype list
Reviewed-by: valeriep, mullan
2021-10-05 18:18:51 +00:00
Weijun Wang
edd9d1c97b 8274330: Incorrect encoding of the DistributionPointName object in IssuingDistributionPointExtension
Reviewed-by: ascarpino
2021-09-29 15:37:16 +00:00
Alexey Bakhtin
5ba0d09fe4 8274205: Handle KDC_ERR_SVC_UNAVAILABLE error code from KDC
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: weijun
2021-09-24 12:09:38 +00:00
Sean Mullan
6d91a3eb7b 8269039: Disable SHA-1 Signed JARs
Reviewed-by: weijun
2021-09-21 13:45:47 +00:00
Fernando Guallini
041ae20b10 8268558: [TESTBUG] Case 2 in TestP11KeyFactoryGetRSAKeySpec is skipped
Reviewed-by: mullan, rhalade
2021-09-07 14:36:15 +00:00
Jamil Nimeh
29e0f1386d 8272385: Enforce ECPrivateKey d value to be in the range [1, n-1] for SunEC provider
Reviewed-by: ascarpino, weijun
2021-09-02 17:54:08 +00:00
Weijun Wang
3d657eb0a6 8262186: Call X509KeyManager.chooseClientAlias once for all key types
Reviewed-by: xuelei
2021-08-31 20:07:02 +00:00
Fernando Guallini
f18c0fac11 8271560: sun/security/ssl/DHKeyExchange/LegacyDHEKeyExchange.java still fails due to "An established connection was aborted by the software in your host machine"
Reviewed-by: xuelei, rhalade
2021-08-30 17:28:49 +00:00
Sean Coffey
04a806ec86 8270344: Session resumption errors
Reviewed-by: xuelei
2021-08-20 20:10:42 +00:00
Abdul Kolarkunnu
a199ebc017 8272581: sun/security/pkcs11/Provider/MultipleLogins.sh fails after JDK-8266182
Reviewed-by: weijun
2021-08-17 16:54:32 +00:00
Rajan Halade
1cbf41a87b 8225083: Remove Google certificate that is expiring in December 2021
Reviewed-by: xuelei, mullan
2021-08-17 16:01:42 +00:00
Abdul Kolarkunnu
ed57cf1cf3 8266182: Automate manual steps listed in the test jdk/sun/security/pkcs12/ParamsTest.java
Reviewed-by: hchao, ssahoo, xuelei, weijun
2021-08-17 12:12:22 +00:00
Martin Balao
67869b491a 8270137: Kerberos Credential Retrieval from Cache not Working in Cross-Realm Setup
Reviewed-by: weijun
2021-08-10 16:28:10 +00:00
Sean Mullan
89f5c96d63 8232066: Remove outdated code/methods from PKIX implementation
Reviewed-by: weijun
2021-07-30 12:43:20 +00:00
Rajan Halade
2ec45dc2dd 8225082: Remove IdenTrust certificate that is expiring in September 2021
Reviewed-by: shade, mullan
2021-07-29 00:22:09 +00:00
Sean Mullan
fc80a6b493 8270946: X509CertImpl.getFingerprint should not return the empty String
Reviewed-by: weijun
2021-07-27 13:49:03 +00:00
Hai-May Chao
fc38331f44 8260960: Signs of jarsigner signing
Reviewed-by: weijun, rhalade
2021-07-21 20:28:55 +00:00
Sibabrata Sahoo
a32d2eefea 8269276: Additional tests for MessageDigest with different providers
Reviewed-by: valeriep, wetmore
2021-07-15 05:42:55 +00:00
Alexey Bakhtin
e1d3e73d4e 8268965: TCP Connection Reset when connecting simple socket to SSL server
Reviewed-by: xuelei
Backport-of: 6f171b9f0d
2021-07-12 10:24:39 +00:00
Sean Coffey
0d745ae8fd 8269034: AccessControlException for SunPKCS11 daemon threads
Reviewed-by: valeriep
2021-06-29 22:52:45 +00:00
Valerie Peng
80dc262e81 8265500: Some impls of javax.crypto.Cipher.init() do not throw UnsupportedOperationExc for unsupported modes
Reviewed-by: xuelei
2021-06-17 23:27:54 +00:00
Rajan Halade
54f5ffeaad 8259338: Add expiry exception for identrustdstx3 alias to VerifyCACerts.java test
Backport-of: b836b83b2a
2021-06-16 18:53:37 +00:00
Valerie Peng
f69e2d5651 8267397: AlgorithmId's OID cache is never refreshed
Reviewed-by: xuelei
2021-06-14 20:40:26 +00:00
Weijun Wang
e39346e708 8268093: Manual Testcase: "sun/security/krb5/config/native/TestDynamicStore.java" Fails with NPE
Reviewed-by: mullan
2021-06-11 15:12:11 +00:00
Evan Whelan
408e0a9c69 8255148: Confusing log output: SSLSocket duplex close failed
Reviewed-by: mullan
2021-06-09 20:38:47 +00:00
Fernando Guallini
3aa7062c3d 8262409: sun/security/ssl/SSLSocketImpl/SSLSocketImplThrowsWrongExceptions. SSL test failures caused by java failed with "Server reported the wrong exception"
Reviewed-by: rhalade, xuelei
2021-06-03 16:06:31 +00:00
Sean Coffey
eb385c0de2 8268167: MultipleLogins.java failure on macosx-aarch64
Reviewed-by: weijun
2021-06-03 13:47:47 +00:00
Sean Coffey
bdeaeb47d0 8240256: Better resource cleaning for SunPKCS11 Provider
Reviewed-by: valeriep
2021-06-03 06:45:06 +00:00
Fernando Guallini
ccfcd92667 8180571: Refactor sun/security/pkcs11 shell tests to plain java tests and fix failures
Reviewed-by: xuelei
2021-06-01 19:09:42 +00:00
Evgeny Astigeevich
a859d87cc1 8267721: Enable sun/security/pkcs11 tests for Amazon Linux 2 AArch64
Reviewed-by: phh
2021-05-26 21:08:47 +00:00
Weijun Wang
640a2afda3 8267184: Add -Djava.security.manager=allow to tests calling System.setSecurityManager
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: dholmes, alanb, dfuchs, mchung, mullan, prr
2021-05-24 16:55:55 +00:00