Commit graph

220 commits

Author SHA1 Message Date
Jack Hartstein
58a59e3dcb 8240997: Remove more "hack" word in security codes
Reviewed-by: xuelei
2021-06-09 02:12:25 +00:00
Anthony Scarpino
c7c77fd32b 8255557: Decouple GCM from CipherCore
Reviewed-by: valeriep
2021-06-07 22:22:28 +00:00
Valerie Peng
136badb1f7 8248268: Support KWP in addition to KW
Reviewed-by: xuelei
2021-06-02 21:31:57 +00:00
Weijun Wang
40d23a0c0b 8267543: Post JEP 411 refactoring: security
Reviewed-by: mullan
2021-06-02 15:47:57 +00:00
Weijun Wang
6765f90250 8266459: Implement JEP 411: Deprecate the Security Manager for Removal
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: erikj, darcy, chegar, naoto, joehw, alanb, mchung, kcr, prr, lancea
2021-06-02 11:57:31 +00:00
Sergey Tsypanov
9425d3de83 8261880: Change nested classes in java.base to static nested classes where possible
Reviewed-by: redestad
2021-05-20 13:56:11 +00:00
Alexey Bakhtin
1603ca2342 8241248: NullPointerException in sun.security.ssl.HKDF.extract(HKDF.java:93)
Reviewed-by: jnimeh, xuelei
2021-05-10 09:45:35 +00:00
Naoto Sato
bebfae48e3 8264208: Console charset API
Reviewed-by: joehw, rriggs, alanb
2021-04-23 18:57:03 +00:00
Weijun Wang
f834557ae0 8258915: Temporary buffer cleanup
Reviewed-by: valeriep
2021-04-22 18:11:43 +00:00
Sean Mullan
7232e3c704 8249906: Enhance opening JARs
Reviewed-by: weijun, rhalade, mschoene
2021-04-20 21:45:52 +00:00
Hai-May Chao
719f95e504 8260693: Provide the support for specifying a signer in keytool -genkeypair
Reviewed-by: weijun
2021-04-09 01:59:59 +00:00
Weijun Wang
3d2b4cc567 8264864: Multiple byte tag not supported by ASN.1 encoding
Reviewed-by: xuelei
2021-04-08 21:26:05 +00:00
Alex Blewitt
77ebc11038 8263892: More modifier order fixes in java.base
Reviewed-by: naoto, iris, redestad
2021-03-19 21:06:24 +00:00
Alex Blewitt
b49c589340 8263658: Use the blessed modifier order in java.base
Reviewed-by: rriggs, redestad
2021-03-19 13:06:58 +00:00
djelinski
18fc35053c 8259886: Improve SSL session cache performance and scalability
Reviewed-by: erikj, xuelei
2021-03-07 01:13:24 +00:00
Jamil Nimeh
8554fe6ebc 8253866: Security Libs Terminology Refresh
Reviewed-by: erikj, weijun, mullan
2021-01-14 16:36:51 +00:00
Roger Riggs
68f2acbf4c 8252055: Use java.util.HexFormat in java.security
Reviewed-by: xuelei
2020-12-18 16:35:11 +00:00
Weijun Wang
7f58a8e954 8213719: Both sect163r2 and sect163k1 are default curves for field size 163
Reviewed-by: valeriep, xuelei
2020-11-30 22:19:53 +00:00
Weijun Wang
486d6f631b 8256363: Define toString() for MGF1ParameterSpec
Reviewed-by: mullan
2020-11-18 13:14:11 +00:00
Roland Westrelin
a7422ac2f4 8255150: Add utility methods to check long indexes and ranges
Co-authored-by: Paul Sandoz <psandoz@openjdk.org>
Reviewed-by: jvernee, dlong, vlivanov
2020-11-17 10:37:27 +00:00
Christoph Langer
64feeab70a 8255603: Memory/Performance regression after JDK-8210985
Reviewed-by: simonis, xuelei, aph
2020-11-01 23:24:47 +00:00
Weijun Wang
80380d51d2 8255494: PKCS7 should use digest algorithm to verify the signature
Reviewed-by: valeriep
2020-10-31 03:22:35 +00:00
Alexey Bakhtin
7a7ce021de 8007632: DES/3DES keys support in PKCS12 keystore
Reviewed-by: weijun
2020-10-27 18:41:44 +00:00
Weijun Wang
839f01ddf5 8242068: Signed JAR support for RSASSA-PSS and EdDSA
Reviewed-by: valeriep
2020-10-21 14:18:43 +00:00
Sean Mullan
27f1ebc0af 8244479: Further constrain certificates
Reviewed-by: ascarpino, ahgross, rhalade
2020-10-20 14:58:38 -07:00
Sean Mullan
62a03bd387 8237995: Enhance certificate processing
Reviewed-by: weijun, rhalade, ahgross, erikj
2020-10-20 14:58:38 -07:00
Weijun Wang
3c4e824aa5 8249783: Simplify DerValue and DerInputStream
Reviewed-by: valeriep
2020-10-01 18:55:35 +00:00
Anthony Scarpino
0b83fc0150 8235710: Remove the legacy elliptic curves
Reviewed-by: xuelei, erikj
2020-09-25 02:40:36 +00:00
Valerie Peng
40206822f4 8172366: Support SHA-3 based signatures
Enhance default JDK providers including SUN, SunRsaSign, and SunEC, with signatures using SHA-3 family of digests.

Reviewed-by: xuelei
2020-09-15 20:28:48 +00:00
Sean Coffey
7686e87155 8250968: Symlinks attributes not preserved when using jarsigner on zip files
Reviewed-by: lancea, weijun, hchao
2020-09-07 19:01:07 +00:00
Sean Mullan
f879698c63 8241003: Deprecate "denigrated" java.security.cert APIs that represent DNs as Principal or String objects
Reviewed-by: xuelei, valeriep, weijun
2020-08-26 13:31:10 -04:00
Mikael Vidstedt
1982432db4 Merge 2020-07-14 23:29:45 -07:00
Weijun Wang
b852688c05 8237592: Enhance certificate verification
Reviewed-by: xuelei, mullan, rhalade, ahgross
2020-04-18 12:16:42 +08:00
Xue-Lei Andrew Fan
8fdbb29079 8236191: Enhance OID processing
Reviewed-by: jnimeh, weijun, ahgross, rhalade
2020-03-05 14:59:34 -08:00
Sean Coffey
3d9bad16d1 8218021: Have jarsigner preserve posix permission attributes
Reviewed-by: weijun, lancea, alanb
2020-07-02 08:17:31 +00:00
Jamil Nimeh
c0b348f3ef 8239950: Update PKCS9 Attributes to PKCS#9 v2.0 Encodings
Reviewed-by: weijun
2020-06-23 07:48:39 -07:00
Hai-May Chao
e3eb38f4d2 8244148: keytool -printcert and -printcrl should support the -trustcacerts and -keystore options
Reviewed-by: weijun, jjiang
2020-06-23 16:30:38 +08:00
Valerie Peng
56b7960496 8242897: KeyFactory.generatePublic( x509Spec ) failed with java.security.InvalidKeyException
Changed SunRsaSign provider to accept RSA signature oid in RSA key encoding for backward compatibility

Reviewed-by: weijun
2020-06-03 04:29:04 +00:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Anthony Scarpino
fd28aad72d 8166597: Crypto support for the EdDSA Signature Algorithm
Reviewed-by: weijun, mullan, wetmore
2020-05-18 09:42:52 -07:00
Claes Redestad
ceda3089db 8244624: Improve handling of JarFile META-INF resources
Reviewed-by: lancea, weijun, martin
2020-05-11 10:37:54 +02:00
Hai-May Chao
76507eef63 8242060: Add revocation checking to jarsigner
Reviewed-by: mullan, weijun
2020-05-07 10:48:06 +08:00
Hai-May Chao
f04a7e5cb4 8172404: Tools should warn if weak algorithms are used before restricting them
Reviewed-by: mullan, weijun
2020-04-17 20:11:39 +08:00
Weijun Wang
502d45955f 8240848: ArrayIndexOutOfBoundsException buf for TextCallbackHandler
Reviewed-by: mullan
2020-04-10 15:05:42 +08:00
Sean Mullan
d285fd6dce 8234418: Better parsing with CertificateFactory
Reviewed-by: weijun, mschoene, rhalade
2020-02-06 09:36:51 -05:00
Weijun Wang
533649b8ca 8237218: Support NIST Curves verification in java implementation
Reviewed-by: ascarpino
2020-02-22 08:10:21 +08:00
Sean Mullan
1bfcf768f5 8234032: Improve basic calendar services
Reviewed-by: weijun, rhalade, mschoene
2020-01-14 14:51:57 -05:00
Xue-Lei Andrew Fan
4e430ffbb6 8239264: Clearup the legacy ObjectIdentifier constructor from int array
Reviewed-by: jnimeh
2020-02-17 18:52:50 -08:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00