Commit graph

56 commits

Author SHA1 Message Date
Weijun Wang
9ce2d75d0b 8278449: Improve keychain support
Reviewed-by: ahgross, rhalade, mullan
2022-04-19 22:18:33 +00:00
Magnus Ihse Bursie
fb469fb894 8284893: Fix typos in java.base
Reviewed-by: iris, wetmore, lancea, mullan, naoto
2022-04-19 20:07:57 +00:00
Valerie Peng
313bc7f64f 8267319: Use larger default key sizes and algorithms based on CNSA
Reviewed-by: weijun, xuelei
2022-03-24 22:50:26 +00:00
Hai-May Chao
f43ffe211f 8282633: jarsigner output does not explain why an EC key is disabled if its curve has been disabled
Reviewed-by: weijun
2022-03-15 15:54:47 +00:00
Weijun Wang
fc918a73d0 8281234: The -protected option is not always checked in keytool and jarsigner
Reviewed-by: hchao, mullan
2022-03-02 14:07:26 +00:00
Weijun Wang
2ed1f4cf32 8281175: Add a -providerPath option to jarsigner
Reviewed-by: xuelei, hchao
2022-02-07 15:05:30 +00:00
Sean Mullan
a0f6f2409e 8280890: Cannot use '-Djava.system.class.loader' with class loader in signed JAR
Reviewed-by: weijun, hchao
2022-02-07 14:06:08 +00:00
Hai-May Chao
c2ee1b33c3 8273236: keytool does not accurately warn about algorithms that are disabled but have additional constraints
Reviewed-by: mullan
2022-01-26 20:31:04 +00:00
Andrey Turbanov
5af7f25814 8274811: Remove superfluous use of boxing in java.base
Reviewed-by: lancea
2022-01-19 10:59:40 +00:00
Andrey Turbanov
6677554374 8274949: Use String.contains() instead of String.indexOf() in java.base
Reviewed-by: weijun, dfuchs, vtewari, lancea
2021-11-19 18:48:06 +00:00
Hai-May Chao
de93b1d0e8 8257722: Improve "keytool -printcert -jarfile" output
Reviewed-by: weijun
2021-10-28 23:04:34 +00:00
Hai-May Chao
fec470f262 8272163: Add -version option to keytool and jarsigner
Reviewed-by: weijun
2021-10-22 20:53:38 +00:00
Hai-May Chao
a48251cb4a 8266137: Improve Keystore integrity
Reviewed-by: mschoene, rhalade, weijun
2021-10-19 18:25:59 +00:00
Andrey Turbanov
56b8b35286 8273261: Replace 'while' cycles with iterator with enhanced-for in java.base
Reviewed-by: dfuchs, rriggs, iris, mullan
2021-09-23 20:04:36 +00:00
Hai-May Chao
f2d880c11a 8266400: importkeystore fails to a password less pkcs12 keystore
Reviewed-by: weijun
2021-05-24 15:38:32 +00:00
Weijun Wang
48bb996ac9 8266220: keytool still prompt for store password on a password-less pkcs12 file if -storetype pkcs12 is specified
Reviewed-by: coffeys, hchao
2021-04-30 14:04:13 +00:00
Hai-May Chao
719f95e504 8260693: Provide the support for specifying a signer in keytool -genkeypair
Reviewed-by: weijun
2021-04-09 01:59:59 +00:00
Roger Riggs
8cf1c62c34 8263754: HexFormat 'fromHex' methods should be static
Reviewed-by: redestad, naoto, chegar
2021-03-29 20:38:10 +00:00
Andrey Turbanov
68deb24b38 8080272: Refactor I/O stream copying to use InputStream.transferTo/readAllBytes and Files.copy
Reviewed-by: mcimadamore, alanb
2021-03-16 10:10:05 +00:00
Hai-May Chao
05301f5fd2 8257497: Update keytool to create AKID from the SKID of the issuing certificate as specified by RFC 5280
Reviewed-by: coffeys, mullan, weijun
2021-02-17 16:38:56 +00:00
Roger Riggs
68f2acbf4c 8252055: Use java.util.HexFormat in java.security
Reviewed-by: xuelei
2020-12-18 16:35:11 +00:00
Weijun Wang
839f01ddf5 8242068: Signed JAR support for RSASSA-PSS and EdDSA
Reviewed-by: valeriep
2020-10-21 14:18:43 +00:00
Sean Mullan
f879698c63 8241003: Deprecate "denigrated" java.security.cert APIs that represent DNs as Principal or String objects
Reviewed-by: xuelei, valeriep, weijun
2020-08-26 13:31:10 -04:00
Hai-May Chao
e3eb38f4d2 8244148: keytool -printcert and -printcrl should support the -trustcacerts and -keystore options
Reviewed-by: weijun, jjiang
2020-06-23 16:30:38 +08:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Anthony Scarpino
fd28aad72d 8166597: Crypto support for the EdDSA Signature Algorithm
Reviewed-by: weijun, mullan, wetmore
2020-05-18 09:42:52 -07:00
Hai-May Chao
f04a7e5cb4 8172404: Tools should warn if weak algorithms are used before restricting them
Reviewed-by: mullan, weijun
2020-04-17 20:11:39 +08:00
Sean Mullan
3efd000036 8242565: Policy initialization issues when the denyAfter constraint is enabled
Reviewed-by: weijun
2020-04-16 09:48:32 -04:00
Hai-May Chao
0c9f8e472f 8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names
Reviewed-by: jnimeh, weijun, mullan
2020-03-18 09:23:57 +08:00
Anthony Scarpino
ca112043f1 8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
Reviewed-by: mullan, xuelei, weijun
2019-12-18 12:10:09 -08:00
Weijun Wang
c0d097eac6 8214024: Remove the default keytool -keyalg value
Reviewed-by: mullan
2019-11-15 09:06:58 +08:00
Weijun Wang
a66829bc89 8231950: keytool -ext camel-case shorthand not working
Reviewed-by: mullan
2019-11-04 14:26:18 +08:00
Weijun Wang
c12cf04011 8225392: Comparison builds are failing due to cacerts file
Reviewed-by: erikj, martin, mullan
2019-06-15 14:39:04 +08:00
Weijun Wang
0f56400907 8223063: Support CNG RSA keys
Reviewed-by: mullan
2019-05-14 08:47:13 +08:00
Valerie Peng
3b6b6b3cb3 8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange
Add internal Signature init methods to select provider based on both key and parameter

Reviewed-by: xuelei
2019-04-10 02:35:18 +00:00
Weijun Wang
cf973e3db4 8219861: Add new keytool -showinfo -tls command for displaying TLS configuration information
Reviewed-by: mullan
2019-04-04 20:22:16 +08:00
Weijun Wang
61485b75a9 8221257: Improve serial number generation mechanism for keytool -gencert
Reviewed-by: xuelei, mullan
2019-03-30 16:32:23 +08:00
Weijun Wang
e320983f9f 8218888: keytool -genkeypair should not have the -destalias option
Reviewed-by: mullan
2019-02-13 21:24:13 +08:00
Weijun Wang
54815061a1 8215937: Check usages of security-related Resources files
Reviewed-by: mullan
2019-01-19 09:20:47 +08:00
Weijun Wang
1d014da14b 8215694: keytool cannot generate RSASSA-PSS certificates
Reviewed-by: xuelei
2019-01-16 11:25:55 +08:00
Weijun Wang
9136c7d1d0 8076190: Customizing the generation of a PKCS12 keystore
Reviewed-by: mullan
2018-12-13 11:16:33 +08:00
Weijun Wang
320616a865 8214179: Add groupname info into keytool -list and -genkeypair output
Reviewed-by: mullan
2018-12-01 21:58:05 +08:00
Weijun Wang
b1c4b461f1 8214100: use of keystore probing results in unnecessary exception thrown
Reviewed-by: mullan
2018-11-27 08:51:20 +08:00
Weijun Wang
c20332c412 8212003: Deprecating the default keytool -keyalg option
Reviewed-by: mullan, xuelei
2018-11-17 18:11:23 +08:00
Weijun Wang
65dc116bf6 8213400: Support choosing group name in keytool keypair generation
Reviewed-by: apetcher, xuelei
2018-11-14 08:46:25 +08:00
Weijun Wang
ea95e1ef2e 8201290: keytool importcert fails with CertificateParsingException if unknown certificate algorithms should be imported
Reviewed-by: mullan, xuelei
2018-08-10 17:07:44 +08:00
Brian Burkhalter
9e3d8fd230 8194746: (fs) Add equivalents of Paths.get to Path interface
Copy Paths.get() methods to Path.get() methods and have former call latter

Reviewed-by: alanb, forax, chegar, psandoz
2018-03-22 12:30:47 -07:00
Lana Steuck
8f528fba93 Merge 2018-01-18 18:58:46 +00:00
Goetz Lindenmaier
22762d1cdc 8189102: All tools should support -?, -h and --help
Reviewed-by: kvn, jjg, weijun, alanb, rfield, ksrini
2018-01-16 08:48:34 +01:00
Weijun Wang
b01627c0e4 8192988: keytool should support -storepasswd for pkcs12 keystores
Reviewed-by: mullan
2017-12-14 20:19:34 +08:00