Commit graph

140 commits

Author SHA1 Message Date
Rahul Yadav
778d8a45cb 8245306: Update sun.security.ssl.SSLLogger to use Immutable DateTimeFormatter
The fix updates sun.security.ssl.SSLLogger to use DateTimeFormatter to make it virtual thread friendly

Reviewed-by: alanb, jnimeh
2020-07-24 12:07:59 +01:00
Hai-May Chao
e3eb38f4d2 8244148: keytool -printcert and -printcrl should support the -trustcacerts and -keystore options
Reviewed-by: weijun, jjiang
2020-06-23 16:30:38 +08:00
Prasadrao Koppula
bb86779366 8246031: SSLSocket.getSession() doesn't close connection for timeout/ interrupts
Reviewed-by: xuelei, coffeys
2020-06-11 21:54:51 +05:30
Anthony Scarpino
ee452946fc 8245686: Ed25519 and Ed448 present in handshake messages
Reviewed-by: jnimeh, xuelei, wetmore
2020-06-09 18:27:59 -07:00
Xue-Lei Andrew Fan
7514ad9ad0 8240871: SSLEngine handshake status immediately after the handshake can be NOT_HANDSHAKING rather than FINISHED with TLSv1.3
Reviewed-by: ascarpino
2020-05-29 13:48:13 -07:00
Xue-Lei Andrew Fan
17a298962c 8206925: Support the certificate_authorities extension
Reviewed-by: mullan
2020-05-27 09:46:40 -07:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Xue-Lei Andrew Fan
bfcb340606 8236464: SO_LINGER option is ignored by SSLSocket in JDK 11
Reviewed-by: ascarpino
2020-04-24 13:30:47 -07:00
Sibabrata Sahoo
e5c84ff282 8242929: The values of jdk.tls.namedGroups should not be case-sensitive
The values of jdk.tls.namedGroups should not be case-sensitive

Reviewed-by: xuelei
2020-04-23 22:49:55 -07:00
Xue-Lei Andrew Fan
72446bb0dc 8242141: New System Properties to configure the TLS signature schemes
Reviewed-by: ascarpino, jnimeh, mullan
2020-04-22 10:51:16 -07:00
Anthony Scarpino
ed18906c08 8242008: SSLSession inconsistencies
Reviewed-by: jnimeh, xuelei
2020-04-15 13:50:41 -07:00
Vipin Sharma
cc05419e1a 8242366: Fix JavaDoc warnings
Reviewed-by: dfuchs, mullan, prappo, weijun
2020-04-15 20:42:43 +01:00
Henry Jen
0278846eaa Merge 2020-04-14 23:11:49 +00:00
Prasadrao Koppula
aadc7c7ca8 8237474: Default SSLEngine should create in server role
Reviewed-by: xuelei, coffeys
2020-04-14 14:16:58 +00:00
Jamil Nimeh
6b7a466f74 8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
Reviewed-by: xuelei
2020-04-08 00:03:56 -07:00
Xue-Lei Andrew Fan
ed00873148 8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
Reviewed-by: ascarpino
2020-04-05 20:17:08 -07:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)
Reviewed-by: weijun
2020-04-01 18:38:05 -07:00
Xue-Lei Andrew Fan
36af90acc0 8215712: Parsing extension failure may alert decode_error
Reviewed-by: jnimeh
2020-03-22 09:30:16 -07:00
Xue-Lei Andrew Fan
d243e40f7b 8241039: Retire the deprecated SSLSession.getPeerCertificateChain() method
Reviewed-by: mullan, alanb, dfuchs
2020-03-20 09:15:00 -07:00
Alexey Bakhtin
14e37ba3df 8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
Reviewed-by: xuelei
2020-03-11 19:14:08 +03:00
Xue-Lei Andrew Fan
89448a83d9 8233619: SSLEngine handshake status immediately after the handshake can be NOT_HANDSHAKING rather than FINISHED with TLSv1.3
Reviewed-by: jnimeh
2020-03-03 15:57:01 -08:00
Mikael Vidstedt
3318314c7c 8237589: Fix copyright header formatting
Reviewed-by: jjg, serb, iris, jwilhelm
2020-01-21 14:23:01 -08:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00
Henry Jen
ae81cfa30f Merge 2020-01-15 01:54:35 +00:00
Anthony Scarpino
7ed4930a8e 8236098: AlgorithmConstraints:permits method not throwing IAEx when primitives are empty
Reviewed-by: xuelei
2020-01-08 13:25:03 -08:00
Jesper Wilhelmsson
943b87ddde Merge 2020-01-09 20:21:53 +01:00
Jamil Nimeh
8a1b5ad914 8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
Reviewed-by: xuelei
2020-01-05 21:04:39 -08:00
Sibabrata Sahoo
fca342f736 8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property
Corrected Cipher Suites ordering through system properties

Reviewed-by: xuelei
2019-12-16 00:23:50 -08:00
Sibabrata Sahoo
58cce5fbf4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-13 01:43:14 -08:00
Xue-Lei Andrew Fan
c185319515 8235655: Clean the duplicated block in SSLContextImpl
Reviewed-by: coffeys
2019-12-10 09:31:40 -08:00
Xue-Lei Andrew Fan
f476138133 8235691: Enhance TLS connectivity
Reviewed-by: jnimeh, rhalade, ahgross
2019-12-17 12:55:36 -08:00
Xue-Lei Andrew Fan
72c7b49b0a 8234408: Improve TLS session handling
Reviewed-by: ascarpino, jjiang, ahgross, ssahoo, mullan
2019-11-25 09:50:30 -08:00
Jamil Nimeh
740e70ba17 8232581: Improve TLS verification
Reviewed-by: xuelei, rhalade, mschoene
2019-10-30 13:15:21 -07:00
Jamil Nimeh
c5f884c6d1 8231780: Better TLS messaging support
Reviewed-by: ascarpino, rhalade, mschoene
2019-10-28 18:53:51 -07:00
Xue-Lei Andrew Fan
e6304dcaad 8232424: More constrained algorithms
Reviewed-by: jnimeh, rhalade, ahgross
2019-10-28 10:43:58 -07:00
Xue-Lei Andrew Fan
123febeb98 8229733: TLS message handling improvements
Reviewed-by: jnimeh, rhalade, ahgross
2019-10-20 13:42:44 -07:00
Xue-Lei Andrew Fan
10b010d0f5 8229728: Implement negotiation parameters
Reviewed-by: jnimeh, ahgross, rhalade
2019-09-10 17:13:48 -07:00
Xue-Lei Andrew Fan
3ba75a656a 8235311: Tag mismatch may alert bad_record_mac
Reviewed-by: mullan
2019-12-10 07:07:49 -08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
2019-12-09 21:38:12 -08:00
Xue-Lei Andrew Fan
baebce3d2f 8235448: code cleanup in SSLContextImpl.java
Reviewed-by: jnimeh
2019-12-09 10:56:27 -08:00
Xue-Lei Andrew Fan
96a8b9796d 8235263: Revert TLS 1.3 change that wrapped IOExceptions
Reviewed-by: mullan
2019-12-03 17:15:02 -08:00
Xue-Lei Andrew Fan
50714b0fb9 8235183: Remove the "HACK CODE" in comment
Reviewed-by: jnimeh
2019-12-02 10:42:27 -08:00
Xue-Lei Andrew Fan
5161ab9493 8233954: UnsatisfiedLinkError or NoSuchAlgorithmException after removing sunec.dll
Reviewed-by: ascarpino
2019-11-21 18:42:33 -08:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
2019-11-12 01:36:17 -08:00
Xue-Lei Andrew Fan
12beed6ec9 8233621: Mismatch in jsse.enableMFLNExtension property name
Reviewed-by: mullan
2019-11-08 18:35:33 -08:00
Xue-Lei Andrew Fan
b7f557e5c7 8223940: Private key not supported by chosen signature algorithm
Reviewed-by: valeriep
2019-11-06 09:45:04 -08:00
Anthony Scarpino
0e9916f25b 8228825: Enhance ECDSA operations
Reviewed-by: mullan
2019-10-04 13:44:11 -07:00
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
2019-08-29 10:52:21 -07:00
Xue-Lei Andrew Fan
c299c4fd46 8228757: Fail fast if the handshake type is unknown
Reviewed-by: jnimeh
2019-08-19 12:56:48 -07:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
2019-08-12 21:36:29 -07:00