Commit Graph

37 Commits

Author SHA1 Message Date
Valerie Peng
3a8e9e6104 7146728: Inconsistent length for the generated secret using DH key agreement impl from SunJCE and PKCS11
Always return the secret in the same length as the modulus.

Reviewed-by: wetmore
2012-03-20 15:06:13 -07:00
Alan Bateman
3269d85838 7113349: Initial changeset for Macosx port to jdk
Co-authored-by: Alexander Potochkin <alexander.potochkin@oracle.com>
Co-authored-by: Alexander Zuev <alexander.zuev@oracle.com>
Co-authored-by: Andrew Brygin <andrew.brygin@oracle.com>
Co-authored-by: Artem Ananiev <artem.ananiev@oracle.com>
Co-authored-by: Alex Strange <astrange@apple.com>
Co-authored-by: Bino George <bino@apple.com>
Co-authored-by: Christine Lu <christine.lu@oracle.com>
Co-authored-by: David Katleman <david.katleman@oracle.com>
Co-authored-by: David Durrence <david_durrence@apple.com>
Co-authored-by: Dmitry Cherepanov <dmitry.cherepanov@oracle.com>
Co-authored-by: Greg Lewis <glewis@eyesbeyond.com>
Co-authored-by: Kevin Miller <kevin_m_miller@apple.com>
Co-authored-by: Kurt Miller <kurt@intricatesoftware.com>
Co-authored-by: Landon Fuller <landonf@plausiblelabs.com>
Co-authored-by: Leonid Romanov <leonid.romanov@oracle.com>
Co-authored-by: Loefty Walkowiak <loefty@apple.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Roger Hoover <rhoover@apple.com>
Co-authored-by: Scott Kovatch <scott.kovatch@oracle.com>
Co-authored-by: Sergey ByloKhov <sergey.bylokhov@oracle.com>
Co-authored-by: Mike Swingler <swingler@apple.com>
Co-authored-by: Tomas Hurka <tomas.hurka@oracle.com>
Reviewed-by: jjh, alanb, dholmes, anthony, ohrstrom, ksrini, jrose, weijun, smarks
2012-03-06 20:34:38 +00:00
Vinnie Ryan
594e178180 7151109: backout CR 6988842
Reviewed-by: mullan
2012-03-05 14:13:29 +00:00
Vinnie Ryan
1e3b108ef9 6988842: jce/ECC test fails for SunPKCS11 provider using nss library
Reviewed-by: mullan
2012-03-02 17:24:08 +00:00
Xue-Lei Andrew Fan
8b5551f1eb 7106773: 512 bits RSA key cannot work with SHA384 and SHA512
Reviewed-by: weijun
2012-01-12 03:39:37 -08:00
Valerie Peng
1081efba4f 6414899: P11Digest should support cloning
Enhanced the PKCS11 Digest implementation to support cloning

Reviewed-by: vinnie
2012-01-05 18:18:04 -08:00
Bradford Wetmore
becccc16ec 7053252: New regression test does not compile on windows-amd64
Reviewed-by: valeriep
2011-10-31 16:23:43 -07:00
Xue-Lei Andrew Fan
bdb9312b86 7105940: Test regression: KeyStore must be from provider SunPKCS11-NSSKeyStore
Reviewed-by: weijun
2011-10-28 07:18:54 -07:00
Weijun Wang
f769f7067f 7078816: /test/sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failure
Reviewed-by: alanb
2011-08-15 10:42:41 +08:00
Weijun Wang
610c9dd4e3 7055363: jdk_security3 test target cleanup
Reviewed-by: alanb, xuelei
2011-08-12 12:26:31 +08:00
Lana Steuck
371dfdfc58 Merge 2011-06-23 14:56:38 -07:00
Xue-Lei Andrew Fan
58f8a03a50 7057022: test/sun/security/pkcs11/fips/ClientJSSEServerJSSE.java has invalid jtreg tags
Reviewed-by: weijun
2011-06-23 04:23:50 -07:00
Valerie Peng
b0c37f182f 7003952: SEC: securely load DLLs and launch executables using fully qualified path
Enforce full path when specifying library locations.

Reviewed-by: wetmore, ohair
2011-04-26 15:59:51 -07:00
Valerie Peng
16ddb7350c 7035115: sun/security/pkcs11/Provider/ConfigShortPath.java compilation failed
Updated the test to use reflection and skip when SunPKCS11 provider not present.

Reviewed-by: weijun
2011-04-15 15:56:12 -07:00
Valerie Peng
86875ab33d 6986789: Sun pkcs11 provider fails to parse path name containing "+"
Modified to accept '+' as valid character.

Reviewed-by: weijun
2011-04-12 16:09:17 -07:00
Xue-Lei Andrew Fan
4efe3a9cb7 7027797: take care of ECDH_anon/DH_anon server key exchange for TLS 1.2
The signature of server key exanage message could be null

Reviewed-by: vinnie
2011-03-21 22:02:00 -07:00
Valerie Peng
1daa47b01d 6994008: PKCS11 should support "RSA" and "RSA/ECB/NoPadding" ciphers
Add support for RSA_X_509 mechanism and aliasing of "RSA" to "RSA/ECB/PKCS1Padding".

Reviewed-by: wetmore
2011-03-07 14:14:37 -08:00
Valerie Peng
4ce8048909 6604496: Support for CKM_AES_CTR (counter mode)
Enhanced SunPKCS11 provider to support AES/CTR/NoPadding transformation.

Reviewed-by: vinnie
2011-02-22 12:01:35 -08:00
Lana Steuck
fb91d40572 Merge 2011-01-04 17:05:38 -08:00
Kelly O'Hair
6b6a611c8e 6962318: Update copyright year
Reviewed-by: xdono
2010-12-28 15:53:50 -08:00
Valerie Peng
16faa79cf4 6581254: pkcs11 provider fails to parse configuration file contains windows short path
Modified configuration parsing code to support "~".

Reviewed-by: weijun
2010-12-22 18:30:34 -08:00
Valerie Peng
358ee90f29 6720456: New 4150 may have larger blowfish keysizes
Changed to use TBD value instead of FAIL

Reviewed-by: weijun
2010-11-19 17:05:47 -08:00
Valerie Peng
0ec3c185d5 6687725: Internal PKCS5Padding impl should throw IllegalBlockSizeException and not BadPaddingException
Changed to throw IllegalBlockSizeException when the data length isn't multiples of block size

Reviewed-by: wetmore
2010-11-15 14:38:41 -08:00
Xue-Lei Andrew Fan
f685cc171a 6916074: Add support for TLS 1.2
6985179: To support Server Name Indication extension for JSSE client

Introduces the algorithm constraints to support signature and hash algorithm selection. Includes contributions from wetmore and weijung.

Reviewed-by: wetmore, weijun
2010-11-01 22:02:35 -07:00
Xue-Lei Andrew Fan
aab01a90d7 4873188: Support TLS 1.1
Reviewed-by: wetmore, weijun
2010-10-30 18:39:17 +08:00
Xue-Lei Andrew Fan
53a219bfee 6914943: Implement final TLS renegotiation fix
RFC 5746 implementation

Reviewed-by: wetmore, weijun
2010-06-12 00:42:51 -07:00
Kelly O'Hair
fe008ae27a 6943119: Rebrand source copyright notices
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
Valerie Peng
b05376b108 6837847: PKCS#11 A SecureRandom and a serialization error following installation of 1.5.0_18
Added a custom readObject method to PKCS11 SecureRandom impl

Reviewed-by: wetmore
2010-03-18 17:56:39 -07:00
Valerie Peng
c0cdafcd43 6695485: SignedObject constructor throws ProviderException if it's called using provider "SunPKCS11-Solaris"
Added checking for RSA key lengths in initSign and initVerify

Reviewed-by: vinnie
2010-03-18 17:05:42 -07:00
Vinnie Ryan
f13c1a7ce9 6884175: CR cleanup for 6840752: Provide out-of-the-box support for ECC algorithms
Reviewed-by: wetmore
2009-09-21 23:01:42 +01:00
Bradford Wetmore
fc188b8b29 6867657: Many JSN tests do not run under cygwin
Reviewed-by: ohair
2009-08-06 17:56:59 -07:00
Andy Herrick
e487e25584 6797688: Umbrella: Merge all JDK 6u4 - 6u12 deployment code into JDK7
6845973: Update JDK7 with deployment changes in 6u13, 6u14
4802695: Support 64-bit Java Plug-in and Java webstart on Windows/Linux on AMD64
6825019: DownloadManager should not be loaded and referenced for full JRE
6738770: REGRESSION:JSException throws when use LiveConnect javascript facility
6772884: plugin2 : java.lang.OutOfMemoryError or crash
6707535: Crossing domain hole affecting multiple sites/domains using plug-in
6728071: Non-verification of Update files may allow unintended updates
6704154: Code loaded from local filesystem should not get access to localhost
6727081: Web Start security restrictions bypass using special extension jnlp
6727079: Java Web Start Socket() restriction bypass
6727071: Cache location/user name information disclosure in SingleInstanceImpl
6716217: AppletClassLoader adds permissions based on codebase regardless of CS
6694892: Java Webstart inclusion via system properties override [CVE-2008-2086]
6704074: localhost socket access due to cache location exposed
6703909: Java webstart arbitrary file creation using nativelib
6665315: browser crashes when deployment.properties has more slashes ( / )
6660121: Encoding values in JNLP files can cause buffer overflow
6606110: URLConnection.setProxiedHost for resources that are loaded via proxy
6581221: SSV(VISTA): Redirection FAILS to work if user does a downgrade install
6609756: Buffer Overflow in Java ActiveX component
6608712: Bypassing the same origin policy in Java with crafted names
6534630: "gnumake clobber" doesn't
6849953: JDK7 - replacement of bufferoverflowU.lib on amd64 breaks build
6849029: Need some JDK7 merge clean-up after comments on the webrev
6847582: Build problem on JDK7 with isSecureProperty in merge
6827935: JDK 7 deployment merging - problem in Compiler-msvm.gmk
6823215: latest merge fixes from 6u12 -> JDK7
6816153: further mergers for JDK7 deployment integration
6807074: Fix Java Kernel and JQS in initial JDK7 builds

Initial changeset for implementing 6uX Deployment Features into JDK7

Reviewed-by: dgu, billyh
2009-06-12 14:56:32 -04:00
Bradford Wetmore
e072682162 6706358: jdk/test/sun/security/pkcs11/Cipher/TestSymmCiphers.java has the wrong copyright notice
Reviewed-by: valeriep
2008-05-22 14:20:53 -07:00
Valerie Peng
adaa79491e 6599979: KeyStore.setEntry/setKeyEntry() do not override existing entry for secret key objects
Override existing secret key entry when setEntry/setKeyEntry() is called

Reviewed-by: andreas
2008-03-20 18:41:05 -07:00
Valerie Peng
4b9b2408f3 6572331: regression: cipher.wrap operation fails with CKR_ATTRIBUTE_VALUE_INVALID
Check supported key size range and use encryption if needed

Reviewed-by: andreas
2008-03-20 17:17:10 -07:00
Valerie Peng
83d7d2cdfb 4898461: Support for ECB and CBC/PKCS5Padding
Add support for ECB mode and PKCS5Padding

Reviewed-by: andreas
2008-03-20 16:02:23 -07:00
J. Duke
319a3b9947 Initial load 2007-12-01 00:00:00 +00:00