Commit graph

746 commits

Author SHA1 Message Date
Prasadrao Koppula
c9bee173d6 8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options
Reviewed-by: coffeys, mullan
2024-09-19 13:21:08 +00:00
Jaikiran Pai
1d39249231 8339834: Replace usages of -mx and -ms in some tests
Reviewed-by: aivanov, ascarpino, prr, dholmes
2024-09-12 02:02:14 +00:00
Ferenc Rakoczi
c54fc08aa3 8338587: Internal XOF Methods for SHAKE128 and SHAKE256
Reviewed-by: valeriep, weijun
2024-09-09 13:49:34 +00:00
Hai-May Chao
8fb8cd85b7 8339347: keytool -importpass insists prompting the user even if there is no terminal
Reviewed-by: weijun
2024-09-05 20:17:52 +00:00
Mark Powers
bbb516163d 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs
Reviewed-by: mullan, rhalade
2024-09-03 19:55:58 +00:00
Anthony Scarpino
0c2b175898 8328608: Multiple NewSessionTicket support for TLS
Reviewed-by: djelinski
2024-08-28 17:24:33 +00:00
Weijun Wang
b5b5a5b8e5 8336667: IAE in DerInputStream.toByteArray
Reviewed-by: valeriep
2024-07-25 17:11:59 +00:00
Ben Perez
4c91d5cb41 8322133: getParameterSpec(ECGenParameterSpec.class) on EC AlgorithmParameters does not return standard names
Reviewed-by: mullan
2024-07-23 19:35:11 +00:00
Hai-May Chao
fd741a88e8 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
Reviewed-by: wetmore
2024-07-21 17:05:46 +00:00
Prajwal Kumaraswamy
1b9270ac8a 8328723: IP Address error when client enables HTTPS endpoint check on server socket
Reviewed-by: wetmore, djelinski
2024-07-18 22:42:34 +00:00
Anthony Scarpino
07bc523df8 8334670: SSLSocketOutputRecord buffer miscalculation
Reviewed-by: djelinski, ssahoo
2024-06-26 22:28:33 +00:00
Volodymyr Paprotski
f101e153ce 8333583: Crypto-XDH.generateSecret regression after JDK-8329538
Reviewed-by: sviswanathan, kvn, ascarpino
2024-06-25 22:31:39 +00:00
Ferenc Rakoczi
75bea280b9 8333867: SHA3 performance can be improved
Reviewed-by: kvn, valeriep
2024-06-21 14:16:23 +00:00
nibjen
e681b4e9b3 8332524: Instead of printing "TLSv1.3," it is showing "TLS13"
Reviewed-by: mullan
2024-06-18 13:28:37 +00:00
John Jiang
c0ce7d871f 8333046: Clean codes in sun.security.util.math
Reviewed-by: weijun
2024-06-01 05:58:00 +00:00
Pavel Rappo
3cff588a31 8332826: Make hashCode methods in ArraysSupport friendlier
Reviewed-by: redestad, liach
2024-05-30 09:33:30 +00:00
Volodymyr Paprotski
afed7d0b05 8329538: Accelerate P256 on x86_64 using Montgomery intrinsic
Reviewed-by: ihse, ascarpino, sviswanathan
2024-05-22 16:27:27 +00:00
Ben Perez
cd3a607576 8328864: NullPointerException in sun.security.jca.ProviderList.getService()
Reviewed-by: weijun
2024-05-02 18:50:38 +00:00
Jonathan Gibbons
9cc163a999 8330178: Clean up non-standard use of /** comments in java.base
Reviewed-by: darcy, iris, dfuchs, aivanov, naoto
2024-04-23 18:43:36 +00:00
Weijun Wang
0203c7e612 8318340: Improve RSA key implementations
Reviewed-by: rhalade, mschoene, valeriep, mullan
2024-04-16 11:17:05 +05:30
Sean Mullan
e702646545 8200566: DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails
Reviewed-by: weijun
2024-04-08 20:08:56 +00:00
Sean Coffey
3b582dff84 8051959: Add thread and timestamp options to java.security.debug system property
Reviewed-by: mullan, weijun
2024-04-02 08:51:13 +00:00
Aleksey Shipilev
4a14cba2f1 8329213: Better validation for com.sun.security.ocsp.useget option
Reviewed-by: mullan
2024-04-01 17:27:00 +00:00
Weijun Wang
59c2aff1ed 8323624: ProviderList.ServiceList does not need to be a list
Reviewed-by: mullan
2024-03-29 15:23:26 +00:00
Eirik Bjørsnøs
4eefda9102 8327779: Remove deprecated internal field sun.security.x509.X509Key.key
Reviewed-by: mullan
2024-03-28 20:00:07 +00:00
Aleksey Shipilev
614db2ea9e 8328638: Fallback option for POST-only OCSP requests
Reviewed-by: mullan, rhalade
2024-03-27 14:44:50 +00:00
Prasadrao Koppula
d44aaa37f9 8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message
Reviewed-by: djelinski, coffeys, jjiang, ascarpino
2024-03-22 07:02:37 +00:00
John Jiang
9059727df1 8327182: Move serverAlias into the loop
Reviewed-by: gli, mullan
2024-03-19 02:03:13 +00:00
Weijun Wang
569b05addf 8327818: Implement Kerberos debug with sun.security.util.Debug
Reviewed-by: coffeys, ssahoo
2024-03-18 15:36:28 +00:00
Daniel Jeliński
8f9899b23e 8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode
Reviewed-by: valeriep
2024-03-13 19:09:52 +00:00
Hai-May Chao
ffd43c922e 8327461: KeyStore getEntry is not thread-safe
Reviewed-by: djelinski, weijun
2024-03-11 16:33:17 +00:00
Sean Mullan
c4845f01d2 8317431: Implement simpler Comparator when building certification paths
Reviewed-by: kdriver, weijun
2024-03-08 15:20:37 +00:00
Prajwal Kumaraswamy
bdd1aebea3 8312383: Log X509ExtendedKeyManager implementation class name in TLS/SSL connection
Reviewed-by: coffeys
2024-03-08 09:04:16 +00:00
Weijun Wang
b87d9cf2c9 8325506: Ensure randomness is only read from provided SecureRandom object
Reviewed-by: kdriver, valeriep
2024-02-26 21:52:40 +00:00
Anthony Scarpino
f62b5789ad 8311644: Server should not send bad_certificate alert when the client does not send any certificates
Reviewed-by: djelinski, jjiang, ssahoo
2024-02-26 16:49:01 +00:00
Christoph Langer
c2d9fa26ce 8326000: Remove obsolete comments for class sun.security.ssl.SunJSSE
Reviewed-by: mbaesken, ascarpino
2024-02-18 06:58:22 +00:00
Ben Perez
244573e719 8265372: Simplify PKCS9Attribute
Reviewed-by: weijun
2024-02-16 14:51:31 +00:00
Joe Darcy
fbd15b2087 8325189: Enable this-escape javac warning in java.base
Reviewed-by: alanb, erikj, naoto, smarks, ihse, joehw, lancea, weijun
2024-02-07 20:05:11 +00:00
Magnus Ihse Bursie
18e24d0619 8325109: Sort method modifiers in canonical order
Reviewed-by: aivanov, rriggs, darcy, prappo
2024-02-07 15:50:40 +00:00
John Jiang
fe78c0f191 8325022: Incorrect error message on client authentication
Reviewed-by: jnimeh, hchao, djelinski
2024-02-01 02:35:34 +00:00
Henry Jen
2063bb8ffa Merge
Reviewed-by: erikj
2024-01-17 01:41:52 +00:00
John Jiang
43d2d68da5 8320449: ECDHKeyAgreement should validate parameters before using them
Reviewed-by: mullan
2024-01-16 22:54:45 +00:00
Ferenc Rakoczi
bf7bd9a16c 8317547: Enhance TLS connection support
Reviewed-by: ahgross, rhalade, weijun, valeriep
2024-01-16 05:55:56 +00:00
Sean Mullan
a2544568f9 8308204: Enhanced certificate processing
Reviewed-by: mschoene, rhalade, jnimeh
2024-01-16 05:55:55 +00:00
Ben Perez
c328f9589d 8296787: Unify debug printing format of X.509 cert serial numbers
Reviewed-by: mullan, coffeys
2023-12-14 17:57:36 +00:00
Weijun Wang
45a9ade337 8202598: keytool -certreq output contains inconsistent line separators
Reviewed-by: hchao, mullan
2023-12-14 14:37:15 +00:00
Weijun Wang
11e4a925be 8320597: RSA signature verification fails on signed data that does not encode params correctly
Reviewed-by: mullan, valeriep
2023-12-07 23:25:56 +00:00
Weijun Wang
0a60b0f99e 8302233: HSS/LMS: keytool and jarsigner changes
Reviewed-by: mullan
2023-11-30 19:14:29 +00:00
John Jiang
2c4c6c9ba3 8320049: PKCS10 would not discard the cause when throw SignatureException on invalid key
Reviewed-by: mullan
2023-11-28 23:52:22 +00:00
Weijun Wang
fcb4df26f1 8320192: SHAKE256 does not work correctly if n >= 137
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: mpowers, valeriep
2023-11-20 23:28:48 +00:00