Commit Graph

562 Commits

Author SHA1 Message Date
Mandy Chung
a76f56165c 8043277: Update jdk regression tests to extend the default security policy instead of override
Reviewed-by: alanb, mullan, chegar, sla
2014-10-27 13:45:39 -07:00
Weijun Wang
cd3c6765c2 8044215: Unable to initiate SpNego using a S4U2Proxy GSSCredential (Krb5ProxyCredential)
Reviewed-by: mullan
2014-10-14 10:08:32 +08:00
Weijun Wang
5468e30603 8029659: Keytool, print key algorithm of certificate or key entry
Reviewed-by: xuelei
2014-10-14 10:07:44 +08:00
Weijun Wang
76b1f8c99c 8060007: Keytool test can use bundled NSS lib on Mac
Reviewed-by: vinnie
2014-10-09 16:05:24 +08:00
Vinnie Ryan
3215ed2f0a 8059627: Enable PKCS11 tests on Mac
Reviewed-by: mullan
2014-10-06 16:44:57 +01:00
Vinnie Ryan
a8d4acac11 8041740: Test sun/security/tools/keytool/ListKeychainStore.sh fails on Mac
Reviewed-by: mullan
2014-10-05 14:24:44 +01:00
Weijun Wang
4a99ec3dce 8059313: Enable keytool NSS test on Mac
Reviewed-by: vinnie
2014-09-28 10:42:50 +08:00
Weijun Wang
f18f44bce3 8042900: Allow com.sun.security.jgss to be in different module than org.ietf.jgss
Reviewed-by: valeriep, alanb
2014-09-17 13:55:12 +08:00
Ivan Gerasimov
13da43d0d4 8055731: sun/security/smartcardio/TestDirect.java throws java.lang.IndexOutOfBoundsException
Reviewed-by: valeriep
2014-08-23 01:05:50 +04:00
Weijun Wang
391a556d14 8054817: File ccache only recognizes Linux and Solaris defaults
Reviewed-by: mullan
2014-08-19 14:30:12 +08:00
Ivan Gerasimov
e3b86ec908 8046343: (smartcardio) CardTerminal.connect('direct') does not work on MacOSX
Reviewed-by: mullan, valeriep
2014-08-07 15:32:23 +04:00
Vinnie Ryan
b572fc9aad 8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
Reviewed-by: mullan
2014-08-05 13:59:15 +01:00
Weijun Wang
d99124eadb 8048194: GSSContext.acceptSecContext fails when a supported mech is not initiator preferred
Reviewed-by: mullan
2014-07-21 22:10:37 +08:00
Weijun Wang
0f6c52abb1 8049834: Two security tools tests do not run with only JRE
Reviewed-by: mullan
2014-07-21 22:09:38 +08:00
Weijun Wang
bfa19ebfbc 8043071: Expose session key and KRB_CRED through extended GSS-API
Reviewed-by: mullan
2014-07-19 10:20:42 +08:00
Ivan Gerasimov
80448466d4 8050893: (smartcardio) Invert reset argument in tests in sun/security/smartcardio
Reviewed-by: valeriep
2014-07-18 17:04:10 +04:00
Valerie Peng
efa54ce543 8043406: Change default policy for JCE providers to run with as few privileges as possible
Provide default permissions for crypto providers

Reviewed-by: mullan, vinnie
2014-07-10 22:44:58 +00:00
Weijun Wang
57d0562d7c 8044085: Access ExtendedGSSContext.inquireSecContext() result through SASL
Reviewed-by: mullan
2014-07-10 10:44:48 +08:00
Weijun Wang
ea1882be4f 8048073: Cannot read ccache entry with a realm-less service name
Reviewed-by: xuelei
2014-06-25 18:49:02 +08:00
Weijun Wang
cc269950df 8029994: Support "include" and "includedir" in krb5.conf
Reviewed-by: mullan
2014-06-20 10:27:10 +08:00
Vinnie Ryan
7d5e52ba49 8047085: PKCS11/NSS tests failing intermittently on Windows
Reviewed-by: mullan
2014-06-18 15:05:29 +01:00
Weijun Wang
a22c2ed67f 8046702: default_options.sh test failure on Solaris
Reviewed-by: xuelei
2014-06-13 08:25:50 +08:00
Weijun Wang
53c7b2ac2b 8023197: Pre-configured command line options for keytool and jarsigner
Reviewed-by: xuelei
2014-06-11 18:27:10 +08:00
Anthony Scarpino
b757b4461e 8039212: SecretKeyBasic.sh needs to avoid NSS libnss3 and libsoftokn3 version mismatches
Reviewed-by: vinnie
2014-06-10 12:04:42 -07:00
Weijun Wang
704a20b250 8044747: [TESTBUG] Test sun/security/tools/policytool/i18n.sh fails after clicking 'Done' button in test frame
Reviewed-by: xuelei
2014-06-06 22:31:53 +08:00
Weijun Wang
47e4638160 8044755: Add a test for algorithm constraints check in jarsigner
Reviewed-by: xuelei
2014-06-05 15:27:51 +08:00
Weijun Wang
a57ab24f53 8036779: sun.security.krb5.KdcComm interprets kdc_timeout as msec instead of sec
Reviewed-by: xuelei
2014-05-30 14:37:43 +08:00
Vinnie Ryan
1eef4367df 8044038: Security tests fail on 32 bit linux platform
Reviewed-by: xuelei, weijun
2014-05-29 15:50:36 +01:00
Weijun Wang
1b1639105a 8036709: Java 7 jarsigner displays warning about cert policy tree
Reviewed-by: mullan
2014-05-29 10:36:06 +08:00
Weijun Wang
53cb60f148 8043537: Changes for JDK-8039951 introduced circular dependency between Kerberos and com.sun.security.auth
Reviewed-by: alanb
2014-05-22 07:04:57 +08:00
Jamil Nimeh
4e99062caa 6996377: shrink duplicate code in the constructor of PKIXValidator
Reviewed-by: mullan, xuelei
2014-05-12 12:35:23 -04:00
Weijun Wang
79cdf6ad7f 8039951: com.sun.security.auth.module missing classes on some platforms
Reviewed-by: mullan
2014-05-08 22:30:31 +08:00
Weijun Wang
93378ad4b9 8040321: keytool and jarsigner tests doesn't pass though VM tools to tools
Reviewed-by: alanb
2014-04-25 10:57:09 +08:00
Alexandre Iline
e613bf3290 8039816: Some tests depend on internal API sun.security.action.GetPropertyAction
Replace sun.security.action.GetPropertyAction usages with lambda expressions creating java.security.PrivilegedAction.

Reviewed-by: alanb, mchung, chegar
2014-04-21 13:16:32 -07:00
Alexandre Iline
092e29980a 8039438: Some tests depend on internal API sun.misc.IOUtils
Remove dependency on sun.misc.IOUtils.readFully(InputStream, int, boolean)

Reviewed-by: alanb, mchung, chegar
2014-04-21 13:12:22 -07:00
Weijun Wang
b49a1407bc 8038837: Add support to jarsigner for specifying timestamp hash algorithm
Reviewed-by: vinnie
2014-04-21 10:26:03 +08:00
Xue-Lei Andrew Fan
2f501cd8a5 8028192: Use of PKCS11-NSS provider in FIPS mode broken
Reviewed-by: ahgross, ascarpino, asmotrak
2014-04-09 12:49:51 +00:00
Weijun Wang
3344a6c353 8039132: cleanup @ignore JAAS/krb5 tests
Reviewed-by: xuelei
2014-04-09 17:08:37 +08:00
Weijun Wang
9bae1e597b 8029995: accept yes/no for boolean krb5.conf settings
Reviewed-by: mullan
2014-04-04 21:19:43 +08:00
Rajan Halade
56b41822fb 8033271: Manual security tests have @ignore rather than @run main/manual
Reviewed-by: xuelei, wetmore
2014-03-18 15:04:59 -07:00
Xue-Lei Andrew Fan
451daea8f4 8037346: Need to terminate server process if client runs into problems
Reviewed-by: weijun
2014-03-17 10:07:13 +00:00
Jason Uh
323843f397 8021804: Certpath validation fails if validity period of root cert does not include validity period of intermediate cert
Reviewed-by: mullan
2014-03-12 08:55:35 -07:00
Weijun Wang
e83e738c09 8035963: The failed Kerberos tests due to timeouts
Reviewed-by: alanb, xuelei
2014-03-12 14:18:01 +08:00
Weijun Wang
fd6995ab56 8036971: krb5.conf does not accept directive lines before the first section
Reviewed-by: xuelei
2014-03-11 07:56:49 +08:00
Jason Uh
d6207a4ca5 8036844: test failures due to wrong keystore paths
Reviewed-by: weijun
2014-03-07 10:40:03 -08:00
Xue-Lei Andrew Fan
521f9a2048 8032473: Restructure JSSE regression test hierarchy in jdk test
Reviewed-by: weijun
2014-03-05 07:24:34 +00:00
Weijun Wang
0903468259 8036104: Rename the PAData.java test
Reviewed-by: xuelei
2014-03-03 10:55:31 +08:00
Lana Steuck
657b9db1ba 8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
Updated files with 2011, 2012 and 2013 years according to the file's last updated date

Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
Michael Cui
dca4d10631 8028711: TEST_BUG: Shell tests should pass through VM options
Reviewed-by: alanb
2014-02-13 15:59:04 +00:00
Weijun Wang
2b7c6c0d41 8034762: Move krb5.conf related tests into a single place
Reviewed-by: xuelei
2014-02-12 19:20:43 +08:00
Vladimir Kozlov
57b7b831ae Merge 2014-01-28 14:57:41 -08:00
Weijun Wang
49fdbfba20 8031572: jarsigner -verify exits with 0 when a jar file is not properly signed
Reviewed-by: mullan
2014-01-25 18:16:33 +08:00
Vladimir Kozlov
9c83896027 Merge 2014-01-22 14:17:32 -08:00
Volker Simonis
70041ae4e4 8028537: PPC64: Updated the JDK regression tests to run on AIX
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
2014-01-17 21:54:30 +01:00
Abhijit Saha
a9a038efa7 Merge 2014-01-15 10:09:00 -08:00
Xue-Lei Andrew Fan
ca25819893 8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
Reviewed-by: mullan
2014-01-14 06:41:10 -08:00
Xue-Lei Andrew Fan
520ada1ca7 8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property
Reviewed-by: mullan, weijun
2014-01-13 21:12:58 -08:00
Xue-Lei Andrew Fan
15c7afef94 8028518: Increase the priorities of GCM cipher suites
Reviewed-by: wetmore
2014-01-13 20:56:18 -08:00
Chris Hegarty
be247dff24 Merge 2014-01-10 15:04:46 +00:00
Weijun Wang
74e666c00e 8028780: JDK KRB5 module throws OutOfMemoryError when CCache is corrupt
Reviewed-by: xuelei
2013-12-30 11:51:19 +08:00
Xue-Lei Andrew Fan
3b4a745b26 8025415: Test SSLSocketImplThrowsWrongExceptions.java timed out
Reviewed-by: weijun
2013-12-24 20:07:12 -08:00
Xue-Lei Andrew Fan
a46e0545ea 8030842: Intermittent test failure SSLSocketTimeoutNulls.java
Reviewed-by: weijun
2013-12-19 22:59:21 -08:00
Xue-Lei Andrew Fan
ffe3f52e17 7093640: Enable client-side TLS 1.2 by default
Reviewed-by: weijun, mullan, wetmore
2013-12-19 02:27:25 -08:00
Alan Bateman
76a5534d5b 8029904: Remove com.sun.security.auth.callback.DialogCallbackHandler
Reviewed-by: mullan
2013-12-16 15:05:26 +00:00
Zaiyao Liu
7c18844372 8028562: Test SSLSocketSSLEngineTemplate.java intermittent failed with "Data length error"
Test stabilization, read one more time in case of message fragment

Reviewed-by: mullan, xuelei
2013-12-15 20:24:45 -08:00
Anthony Scarpino
3c1c57bbbd 8027218: TEST_BUG: sun/security/pkcs11/ec tests fail because of ever-changing key size restrictions
Reviewed-by: vinnie
2013-12-04 10:59:17 -08:00
Valerie Peng
0e30b48211 Merge 2013-12-03 17:25:28 -08:00
Valerie Peng
ad74259a34 8029158: sun/security/pkcs11/Signature/TestDSAKeyLength.java does not compile (or run)
Add the missing library path and skip testing against NSS 1.14 or later due to known NSS issue

Reviewed-by: vinnie, ascarpino
2013-12-03 17:23:58 -08:00
Weijun Wang
7ddfe32e7b 8028351: JWS doesn't get authenticated when using kerberos auth proxy
Reviewed-by: xuelei
2013-12-04 09:14:42 +08:00
Vinnie Ryan
9dae7f5c55 8029369: Shell tests in sun/security/pkcs11/ do not compile PKCS11Test
Reviewed-by: mullan
2013-12-02 14:19:25 +00:00
Rajan Halade
dec69128e0 8021418: Intermittent: SSLSocketSSLEngineTemplate.java test fails with timeout
Reviewed-by: xuelei, wetmore
2013-11-27 15:25:36 -08:00
Weijun Wang
d4a597432b 8029181: ts.sh generates invalid file after JDK-8027026
Reviewed-by: vinnie, mullan
2013-11-27 09:56:38 +08:00
Valerie Peng
5e6a93fc20 7200306: SunPKCS11 provider delays the check of DSA key size for SHA1withDSA to sign() instead of init()
Add key length checks to P11Signature class

Reviewed-by: mullan
2013-11-25 11:56:53 -08:00
Lana Steuck
33cd414e58 Merge 2013-11-25 09:40:25 -08:00
Lana Steuck
1a633e63a9 Merge 2013-11-15 07:14:23 -08:00
Vinnie Ryan
242d5a95bd 8028377: test/sun/security/provider/KeyStore/DKSTest.sh attempts to write to ${test.src}
Reviewed-by: alanb, weijun
2013-11-19 15:39:58 +00:00
Weijun Wang
ab91495c0e 8028479: runNameEquals still cannot precisely detect if a usable native krb5 is available
Reviewed-by: xuelei
2013-11-19 14:14:14 +08:00
Rajan Halade
7ba208e79f 8014266: regression test AsyncSSLSocketClose.java time out
Reviewed-by: xuelei
2013-11-14 16:08:28 -08:00
Xue-Lei Andrew Fan
cc6f28352f 8023147: Test DisabledShortRSAKeys.java intermittent failed
Reviewed-by: mullan
2013-11-13 01:14:23 -08:00
Sergey Bylokhov
9ab430a0d2 8027696: Incorrect copyright header in the tests
Reviewed-by: alanb, malenkov, mullan
2013-11-12 20:24:25 +04:00
Weijun Wang
4780d5d560 8027991: InputStream should be closed in sun.security.tools.jarsigner.Main
Reviewed-by: xuelei
2013-11-11 16:54:41 +08:00
Abhijit Saha
15d051e851 Merge 2013-12-07 16:15:08 -08:00
Chris Hegarty
388f28f83b Merge 2013-10-21 15:00:56 +01:00
Leif Samuelsson
a25177c60e 7025699: Policy Tool is not accessible by keyboard
Reviewed-by: alexp, weijun
2013-10-18 08:57:52 +08:00
Jason Uh
9419bb4f59 8026233: test/sun/security/tools/keytool/StorePasswords.java needs to clean up files
Reviewed-by: vinnie
2013-10-17 12:00:20 -07:00
Weijun Wang
286d559a2f 8026712: TEST_BUG: update sun/security/tools/keytool/autotest.sh with a new location to find of libsoftokn3.so
Reviewed-by: vinnie
2013-10-17 20:56:07 +08:00
Weijun Wang
9132d85a65 8027026: Change keytool -genkeypair to use -keyalg RSA
Reviewed-by: alanb, chegar, mullan
2013-10-23 08:32:03 +08:00
Xue-Lei Andrew Fan
ec67e938e2 8026119: Regression test DHEKeySizing.java failing intermittently
Reviewed-by: weijun
2013-10-13 21:10:33 -07:00
Lana Steuck
5db317fd23 Merge 2013-10-10 13:33:02 -07:00
Weijun Wang
8f5279cf87 8026235: keytool NSS test should use 64 bit lib on Solaris
Reviewed-by: vinnie
2013-10-10 15:24:41 +08:00
Valerie Peng
4ff4823dfc Merge 2013-10-09 13:07:58 -07:00
Artem Smotrakov
36b94773c9 8026037: [TESTBUG] sun/security/tools/jarsigner/warnings.sh test fails on Solaris
Reviewed-by: chegar
2013-10-09 18:58:16 +08:00
Valerie Peng
2f4af22f17 7196382: PKCS11 provider should support 2048-bit DH
Query and enforce range checking using the values from native PKCS11 library.

Reviewed-by: xuelei
2013-10-08 11:07:31 -07:00
Xue-Lei Andrew Fan
1d8fbe7d05 6956398: make ephemeral DH key match the length of the certificate key
Reviewed-by: weijun
2013-10-07 18:46:28 -07:00
Chris Hegarty
6c1acc1638 Merge 2013-10-04 14:51:17 +01:00
David Katleman
b4c28b3b28 Merge 2013-10-01 12:45:47 -07:00
Kumar Srinivasan
a210a6a74e 8020552: [launcher] changes to support removal of Solaris 32-bit distribution
8023495: [infra] create 64-bit solaris bits with symlinks

Reviewed-by: ihse, tbell, dholmes, darcy, alanb, erikj, sla, martin
2013-09-27 16:29:44 -07:00
Vinnie Ryan
f36ff9e467 8008171: Refactor KeyStore.DomainLoadStoreParameter as a standalone class
Reviewed-by: mullan, weijun
2013-10-09 10:48:44 +01:00
Weijun Wang
cccb39a270 8024302: Clarify jar verifications
8023338: Update jarsigner to encourage timestamping

Reviewed-by: mullan, ahgross
2013-09-19 10:40:16 +08:00
Xue-Lei Andrew Fan
d5c45c6cde 8024444: Change to use othervm mode of tests in SSLEngineImpl
Reviewed-by: mullan
2013-09-09 19:07:05 -07:00