Commit graph

145 commits

Author SHA1 Message Date
Xue-Lei Andrew Fan
b7f557e5c7 8223940: Private key not supported by chosen signature algorithm
Reviewed-by: valeriep
2019-11-06 09:45:04 -08:00
Anthony Scarpino
0e9916f25b 8228825: Enhance ECDSA operations
Reviewed-by: mullan
2019-10-04 13:44:11 -07:00
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
2019-08-29 10:52:21 -07:00
Xue-Lei Andrew Fan
c299c4fd46 8228757: Fail fast if the handshake type is unknown
Reviewed-by: jnimeh
2019-08-19 12:56:48 -07:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
2019-08-12 21:36:29 -07:00
Anthony Scarpino
81db7083a7 8228396: Re-enable Stateless Resumption On by default for merge to mainline
Reviewed-by: jnimeh
2019-07-18 13:58:34 -07:00
Anthony Scarpino
200254b479 8226338: Updates to Stateless Resumption
Reviewed-by: xuelei, jnimeh
2019-07-17 14:37:50 -07:00
Anthony Scarpino
bc7a8842a3 8227551: Session Resumption without Server-Side State off by default
Reviewed-by: xuelei, jnimeh, jjiang
2019-07-17 12:31:21 -07:00
Jamil Nimeh
86be0cd272 8222678: Improve TLS negotiation
Reviewed-by: mullan, rhalade, mschoene
2019-05-02 17:43:26 -07:00
Xue-Lei Andrew Fan
e06d193456 8218863: Better endpoint checks
Reviewed-by: ahgross, jnimeh, mullan, rhalade
2019-02-27 13:58:04 -08:00
Xue-Lei Andrew Fan
dbf62785ef 8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
Reviewed-by: ascarpino
2019-06-19 21:49:33 -07:00
Xue-Lei Andrew Fan
a4277e56c8 8224829: AsyncSSLSocketClose.java has timing issue
Reviewed-by: jnimeh, dfuchs
2019-06-14 12:19:14 -07:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS
Reviewed-by: xuelei, mullan
2019-06-12 18:58:00 -07:00
Anthony Scarpino
94e1d7530f 8211018: Session Resumption without Server-Side State
Reviewed-by: xuelei, jnimeh, jjiang
2019-06-11 16:31:37 -07:00
Martin Balao
ebf8e1c0ac 8223482: Unsupported ciphersuites may be offered by a TLS client
Reviewed-by: xuelei
2019-05-28 19:01:38 -03:00
Xue-Lei Andrew Fan
7aec6727ac 8221253: TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1 bytes
Reviewed-by: jnimeh
2019-05-10 12:33:40 -07:00
Xue-Lei Andrew Fan
62109f5906 8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
Reviewed-by: alanb, dfuchs
2019-05-06 08:54:19 -07:00
Xue-Lei Andrew Fan
eb59ebb177 8216326: SSLSocket stream close() does not close the associated socket
Reviewed-by: jnimeh
2019-04-16 16:59:09 -07:00
Valerie Peng
3b6b6b3cb3 8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange
Add internal Signature init methods to select provider based on both key and parameter

Reviewed-by: xuelei
2019-04-10 02:35:18 +00:00
Xue-Lei Andrew Fan
8263b618ba 8221882: Use fiber-friendly java.util.concurrent.locks in JSSE
Reviewed-by: alanb, dfuchs
2019-04-05 11:28:23 -07:00
Xue-Lei Andrew Fan
d812742d68 8163326: Update the default enabled cipher suites preference
Reviewed-by: mullan
2019-04-04 14:19:29 -07:00
Xue-Lei Andrew Fan
661b5f1534 8217610: TLSv1.3 fail with ClassException when EC keys are stored in PKCS11
Reviewed-by: valeriep
2019-04-03 16:23:22 -07:00
Xue-Lei Andrew Fan
2eb8492163 8168261: Use server cipher suites preference by default
Reviewed-by: mullan
2019-04-01 16:50:17 -07:00
Valerie Peng
e90036145a 8220016: Clean up redundant RSA services in the SunJSSE provider
Removed duplicated RSA signature/KF/KPG support in SunJSSE

Reviewed-by: xuelei
2019-03-29 00:39:49 +00:00
Xue-Lei Andrew Fan
28adfb6d0d 8218889: Improperly use of the Optional API
Reviewed-by: jnimeh, wetmore
2019-03-22 13:47:37 -07:00
Xue-Lei Andrew Fan
901e797c0c 8221270: Duplicated synchronized keywords in SSLSocketImpl
Reviewed-by: mullan
2019-03-21 13:32:08 -07:00
Xue-Lei Andrew Fan
42cb9bf51a 8160247: Mark deprecated javax.security.cert APIs with forRemoval=true
Reviewed-by: weijun
2019-03-13 07:14:50 -07:00
Xue-Lei Andrew Fan
4332a3dc56 8219990: Backout JDK-8219658
Reviewed-by: dfuchs
2019-03-01 09:42:04 -08:00
Xue-Lei Andrew Fan
25f0d60a58 8215430: Remove the internal package com.sun.net.ssl
Reviewed-by: chegar, mullan, wetmore
2019-03-01 08:35:14 -08:00
Xue-Lei Andrew Fan
8f84ae5684 8219658: Deadlock in sun.security.ssl.SSLSocketImpl
Reviewed-by: jnimeh
2019-02-28 10:04:27 -08:00
John Jiang
e4fd3054fc 8215524: Finished message validation failure should be decrypt_error alert
Reviewed-by: xuelei
2019-02-26 07:26:29 +08:00
Xue-Lei Andrew Fan
e6f6863cbc 8168069: X509TrustManagerImpl causes ClassLoader leaks with unparseable extensions
Reviewed-by: mullan
2019-02-20 18:46:30 -08:00
Xue-Lei Andrew Fan
1d7db01371 8219389: Delegated task created by SSLEngine throws BufferUnderflowException
Reviewed-by: ascarpino
2019-02-20 10:20:48 -08:00
Xue-Lei Andrew Fan
2ca0a6689e 4919790: Errors in alert ssl message does not reflect the actual certificate status
Reviewed-by: mullan
2019-02-14 14:19:29 -08:00
Anthony Scarpino
5a97e73e5a 8215790: Delegated task created by SSLEngine throws java.nio.BufferUnderflowException
Reviewed-by: jnimeh
2019-02-12 14:08:07 -08:00
Xue-Lei Andrew Fan
fca0af0487 8217835: Remove the experimental SunJSSE FIPS compliant mode
Reviewed-by: mullan
2019-02-12 13:36:15 -08:00
Xue-Lei Andrew Fan
9c16dc97a0 8218580: endpoint identification algorithm should be case-insensitive
Reviewed-by: jnimeh
2019-02-08 10:03:07 -08:00
Andrey Turbanov
cfeb359800 8218022: Repeated words typos in java.base
Reviewed-by: alanb, lancea, mchung
2019-01-30 00:24:32 +00:00
Sean Mullan
95b848fa61 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883
Reviewed-by: jnimeh, clanger
2019-01-29 10:24:38 -05:00
Xue-Lei Andrew Fan
58c0287a18 8216045: The size of key_exchange may be wrong on FFDHE
Reviewed-by: jnimeh
2019-01-16 11:19:43 -08:00
Xue-Lei Andrew Fan
d81c4896a8 8214418: half-closed SSLEngine status may cause application dead loop
Reviewed-by: jnimeh, dfuchs, chegar
2019-01-14 10:00:45 -08:00
Xue-Lei Andrew Fan
ad47b4c4cc 8209333: Socket reset issue for TLS 1.3 socket close
Reviewed-by: jnimeh
2018-12-18 15:18:44 -08:00
Xue-Lei Andrew Fan
84105b36fd 8215443: The use of TransportContext.fatal() leads to bad coding style
Reviewed-by: ascarpino
2018-12-18 12:08:51 -08:00
Xue-Lei Andrew Fan
3933c8477b 8214339: SSLSocketImpl erroneously wraps SocketException
Reviewed-by: ascarpino, jnimeh
2018-12-14 19:39:39 -08:00
Xue-Lei Andrew Fan
e44207a9f6 8213782: NullPointerException in sun.security.ssl.OutputRecord.changeWriteCiphers
Reviewed-by: ascarpino
2018-12-14 17:51:02 -08:00
Claes Redestad
a3df1d618e 8215281: Use String.isEmpty() when applicable in java.base
Reviewed-by: dfuchs, alanb
2018-12-13 15:31:05 +01:00
Valerie Peng
0b05ebed2e 7092821: java.security.Provider.getService() is synchronized and became scalability bottleneck
Changed Provider class to use ConcurrentHashMap and default providers to use putService()

Reviewed-by: weijun, mullan
2018-12-13 01:15:21 +00:00
Adam Petcher
e922ef3636 8214688: TLS 1.3 session resumption with hello retry request failed with "illegal_parameter"
Reviewed-by: jnimeh
2018-12-11 11:01:02 -05:00
Anthony Scarpino
2094d32f0f 8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash constructor check backwards
Reviewed-by: xuelei
2018-12-10 09:19:30 -08:00
Jamil Nimeh
9947fc1532 8214129: SSL session resumption/SNI with TLS1.2 causes StackOverflowError
Reviewed-by: xuelei, jjiang
2018-12-06 22:05:31 -08:00