Commit graph

746 commits

Author SHA1 Message Date
Hai-May Chao
a95062b39a 8319670: Improve comments describing system properties for TLS server and client for max chain length
Reviewed-by: mullan
2023-11-09 20:21:15 +00:00
Ben Perez
bfaf5704e7 8311546: Certificate name constraints improperly validated with leading period
Reviewed-by: mullan
2023-11-01 16:49:50 +00:00
Hai-May Chao
0064cf90ff 8311596: Add separate system properties for TLS server and client for maximum chain length
Reviewed-by: jnimeh, weijun, mullan
2023-10-31 15:22:18 +00:00
Andrew John Hughes
328b381075 8009550: PlatformPCSC should load versioned so
Reviewed-by: valeriep, stuefe
2023-10-31 02:06:41 +00:00
Weijun Wang
1ddf826aea 8316964: Security tools should not call System.exit
Reviewed-by: valeriep
2023-10-24 18:32:01 +00:00
Sean Mullan
7c80cb26df 8309966: Enhanced TLS connections
Reviewed-by: mschoene, hchao, rhalade, jnimeh
2023-10-17 22:45:06 +00:00
Bradford Wetmore
adca97b659 8286503: Enhance security classes
Reviewed-by: rhalade, mullan, skoivu, weijun
2023-10-17 22:45:06 +00:00
Weijun Wang
5145e5a40a 8318328: DHKEM should check XDH name in case-insensitive mode
Reviewed-by: ascarpino, hchao
2023-10-17 19:36:17 +00:00
Mark Powers
8c0d026d0f 8315042: NPE in PKCS7.parseOldSignedData
Reviewed-by: valeriep, weijun
2023-10-04 00:23:42 +00:00
Weijun Wang
d2e2c4cef1 8309667: TLS handshake fails because of ConcurrentModificationException in PKCS12KeyStore.engineGetEntry
Reviewed-by: djelinski, mullan
2023-10-02 21:53:12 +00:00
Jaikiran Pai
0259da9283 8301686: TLS 1.3 handshake fails if server_name doesn't match resuming session
Reviewed-by: djelinski, wetmore
2023-09-29 05:00:02 +00:00
Daniel Jeliński
fee9d3362c 8293176: SSLEngine handshaker does not send an alert after a bad parameters
Reviewed-by: mdonovan, jnimeh
2023-09-27 07:33:52 +00:00
John Jiang
2264667bba 8315422: getSoTimeout() would be in try block in SSLSocketImpl
Reviewed-by: jnimeh
2023-08-31 22:26:48 +00:00
Ben Perez
595fdd36c5 8314059: Remove PKCS7.verify()
Reviewed-by: mullan
2023-08-14 18:39:18 +00:00
Xue-Lei Andrew Fan
79be8d9383 8312259: StatusResponseManager unused code clean up
Reviewed-by: mpowers, jnimeh
2023-08-10 17:15:56 +00:00
Pavel Rappo
19ae62ae2c 8311170: Simplify and modernize equals and hashCode in security area
Reviewed-by: djelinski, rriggs, valeriep
2023-08-09 12:34:40 +00:00
John Jiang
28be34c1b9 8313226: Redundant condition test in X509CRLImpl
Reviewed-by: jnimeh
2023-08-01 22:35:27 +00:00
Hai-May Chao
e47a84f23d 8312489: Increase jdk.jar.maxSignatureFileSize default which is too low for JARs such as WhiteSource/Mend unified agent jar
Reviewed-by: mullan, mbaesken
2023-07-31 15:18:04 +00:00
Valerie Peng
c27c87786a 8302017: Allocate BadPaddingException only if it will be thrown
Reviewed-by: xuelei
2023-07-27 21:24:03 +00:00
John Jiang
830413f19a 8313087: DerValue::toString should output a hex view of the values in byte array
Reviewed-by: mullan
2023-07-26 15:16:52 +00:00
Anthony Scarpino
e554fdee25 8311592: ECKeySizeParameterSpec causes too many exceptions on third party providers
Reviewed-by: hchao, valeriep
2023-07-25 15:48:31 +00:00
John Jiang
d63bff672f 8312578: Redundant javadoc in X400Address
Reviewed-by: xuelei, hchao
2023-07-24 22:12:28 +00:00
John Jiang
4e8f331a80 8312443: sun.security should use toLowerCase(Locale.ROOT)
Reviewed-by: xuelei
2023-07-20 21:48:19 +00:00
Hai-May Chao
ecd0bc1d62 8300596: Enhance Jar Signature validation
Reviewed-by: mullan, rhalade, mschoene, weijun
2023-07-18 21:17:08 +00:00
Anthony Scarpino
e737968792 8308398: Move SunEC crypto provider into java.base
Reviewed-by: valeriep, alanb
2023-07-17 17:38:54 +00:00
Matthew Donovan
afcf8e4751 8290005: com/sun/jndi/ldap/LdapCBPropertiesTest.java failling with NullPointerException
Reviewed-by: jnimeh, xuelei
2023-07-17 11:16:19 +00:00
Kevin Driver
5667afc362 8295068: SSLEngine throws NPE parsing CertificateRequests
Reviewed-by: xuelei
2023-07-07 16:55:26 +00:00
Pavel Rappo
7b3c2dc5f4 8311122: Fix typos in java.base
Reviewed-by: darcy, naoto, mchung, iris, mli, mullan
2023-07-04 19:03:09 +00:00
Ben Perez
7628da2008 8279254: PKCS9Attribute SigningTime always encoded in UTFTime
Reviewed-by: jnimeh
2023-06-23 15:31:16 +00:00
Jaikiran Pai
db133dbc02 8310106: sun.security.ssl.SSLHandshake.getHandshakeProducer() incorrectly checks handshakeConsumers
Reviewed-by: wetmore, xuelei
2023-06-16 05:38:10 +00:00
Justin Lu
81bfd78901 8309632: JDK 21 RDP1 L10n resource files update
Reviewed-by: naoto
2023-06-15 19:43:07 +00:00
Ben Perez
bed9161c81 8308474: DSA does not reset SecureRandom when initSign is called again
Reviewed-by: weijun
2023-06-13 16:34:58 +00:00
Xue-Lei Andrew Fan
80a8144af5 8309867: redundant class field RSAPadding.md
Reviewed-by: hchao, weijun, valeriep
2023-06-12 20:42:53 +00:00
Kevin Driver
80edd5c298 8294985: SSLEngine throws IAE during parsing of X500Principal
Reviewed-by: wetmore, xuelei, mullan
2023-06-09 23:31:12 +00:00
Martin Balao
4a75fd462c 8301553: Support Password-Based Cryptography in SunPKCS11
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@redhat.com>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: valeriep
2023-06-06 19:39:34 +00:00
Ferenc Rakoczi
050425b141 8298127: HSS/LMS Signature Verification
Reviewed-by: weijun, mullan
2023-06-01 12:31:07 +00:00
Weijun Wang
6b90b0519e 8297878: KEM: Implementation
Reviewed-by: ascarpino, mullan
2023-05-30 16:29:19 +00:00
Jamil Nimeh
2836c34b64 8179502: Enhance OCSP, CRL and Certificate Fetch Timeouts
Reviewed-by: mullan
2023-05-23 21:32:28 +00:00
Weijun Wang
148df533af 8308010: X509Key and PKCS8Key allows garbage bytes at the end
Reviewed-by: mullan
2023-05-18 21:23:29 +00:00
Valerie Peng
46e3d24a6f 8155191: Specify that SecureRandom.nextBytes(byte[]) throws NullPointerException when byte array is null
Reviewed-by: mullan
2023-05-12 23:00:00 +00:00
Kevin Driver
197d0cc603 8294983: SSLEngine throws ClassCastException during handshake
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Reviewed-by: wetmore, xuelei
2023-05-04 19:25:01 +00:00
Eirik Bjorsnos
c92883a3d5 8306772: Remove sun.security.x509.CertException, sun.security.x509.CertParseError
Reviewed-by: mullan
2023-04-25 16:33:24 +00:00
Sean Mullan
f098b490f1 8298310: Enhance TLS session negotiation
Reviewed-by: rhalade, mschoene, weijun, ascarpino
2023-04-18 23:21:21 +00:00
Jamil Nimeh
14aad787a8 8294474: Better AES support
Reviewed-by: ahgross, ascarpino
2023-04-18 23:21:20 +00:00
Kevin Driver
b60604e8eb 8305794: Unused interface sun.security.util.PermissionFactory can be removed
Co-authored-by: Andrey Turbanov <aturbanov@openjdk.org>
Reviewed-by: mullan, aturbanov
2023-04-13 18:46:21 +00:00
Matthew Donovan
39398075b7 8182621: JSSE should reject empty TLS plaintexts
Reviewed-by: xuelei
2023-04-11 04:21:17 +00:00
Weijun Wang
97276859ab 8305310: Calculate PublicKey from PrivateKey
Reviewed-by: mullan
2023-04-10 00:55:16 +00:00
Matthew Donovan
de9f3b6aac 8296400: pointCrlIssuers might be null in DistributionPointFetcher::verifyURL
Reviewed-by: weijun
2023-03-10 14:10:41 +00:00
Weijun Wang
a97271e3b5 8301793: AlgorithmId should not encode a missing parameters field as NULL unless hardcoded
Reviewed-by: mullan
2023-03-06 16:20:14 +00:00
Sean Mullan
26b111d714 8301700: Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
Reviewed-by: xuelei
2023-02-15 13:25:50 +00:00