Commit graph

145 commits

Author SHA1 Message Date
Xue-Lei Andrew Fan
388e1ebbba 8210985: Update the default SSL session cache size to 20480
Reviewed-by: jnimeh, mullan
2018-11-29 08:43:12 -08:00
Xue-Lei Andrew Fan
23ecdbbc1d 8214321: Misleading code in SSLCipher
Reviewed-by: ascarpino
2018-11-26 20:50:21 -08:00
Adam Petcher
a5423f142c 8213202: Possible race condition in TLS 1.3 session resumption
Reviewed-by: jnimeh
2018-11-21 15:06:13 -05:00
Sean Coffey
73ad9c4a00 8148188: Enhance the security libraries to record events of interest
Reviewed-by: egahlin, mullan, weijun, xuelei
2018-11-20 13:12:48 +00:00
Jamil Nimeh
acd81b508e 8212885: TLS 1.3 resumed session does not retain peer certificate chain
Reviewed-by: xuelei, wetmore
2018-11-13 18:22:52 -08:00
Mandy Chung
9ffe7e1205 8211122: Reduce the number of internal classes made accessible to jdk.unsupported
Reviewed-by: alanb, dfuchs, kvn
2018-11-06 10:01:16 -08:00
Xue-Lei Andrew Fan
413d5e8c61 8212738: Incorrectly named signature scheme ecdsa_secp512r1_sha512
Reviewed-by: ascarpino
2018-10-30 19:47:16 -07:00
Jaikiran Pai
21341a37af 8212752: Typo in SSL log message related to inactive/disabled signature scheme
Reviewed-by: coffeys
2018-10-22 10:47:28 +01:00
Jamil Nimeh
137e3161c4 8211806: TLS 1.3 handshake server name indication is missing on a session resume
Reviewed-by: xuelei, wetmore
2018-10-19 18:05:50 -07:00
Adam Petcher
1c4396ebae 8208209: Improve TLS connection stability again
Reviewed-by: xuelei
2018-07-30 13:53:30 -04:00
Jamil Nimeh
a40d0a0ee1 8210989: RSASSA-PSS certificate cannot be selected for client auth on TLSv1.2
Reviewed-by: xuelei
2018-10-16 12:05:57 -07:00
Jamil Nimeh
180a8773fb 8211866: TLS 1.3 CertificateRequest message sometimes offers disallowed signature algorithms
Reviewed-by: xuelei
2018-10-16 11:24:41 -07:00
Ivan Gerasimov
2ae27da3bc 8200381: Typos in javadoc - missing verb "be" and alike
Reviewed-by: lancea, darcy, wetmore
2018-10-02 10:19:07 -07:00
Xue-Lei Andrew Fan
89a4157528 8210974: No extensions debug log for ClientHello
Reviewed-by: jnimeh, wetmore
2018-09-20 14:19:53 -07:00
Jamil Nimeh
a24c991cd3 8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when used on the client side with mutual auth
Reviewed-by: wetmore
2018-09-19 16:07:03 -07:00
Jamil Nimeh
962e755c3a 8140466: ChaCha20 and Poly1305 TLS Cipher Suites
Reviewed-by: xuelei, mullan
2018-09-17 15:25:42 -07:00
Anthony Scarpino
b27f471bdd 8209031: SSLSocket should throw an exception when configuring DTLS
Reviewed-by: xuelei
2018-09-17 14:04:46 -07:00
Xue-Lei Andrew Fan
5de8b5c59a 8209916: NPE in SupportedGroupsExtension
Reviewed-by: jnimeh, wetmore
2018-09-13 17:11:04 -07:00
Xue-Lei Andrew Fan
b7fdc4943f 8210334: TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes
Reviewed-by: ascarpino, wetmore
2018-09-05 21:01:39 -07:00
Jesper Wilhelmsson
d40735db17 Merge 2018-08-29 19:48:28 +02:00
Xue-Lei Andrew Fan
8b373393e6 8209965: The "supported_groups" extension in ServerHellos
Reviewed-by: ascarpino
2018-08-27 09:46:24 -07:00
Bradford Wetmore
5b511a4a78 8207317: SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy
Reviewed-by: xuelei
2018-08-21 11:30:48 -07:00
Rajan Halade
02a3769cfa 8206176: Remove the temporary tls13VN field
Reviewed-by: xuelei, wetmore
2018-08-14 17:21:44 -07:00
Xue-Lei Andrew Fan
66e8f27bd8 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 16:47:56 -07:00
Xue-Lei Andrew Fan
d2b2780859 8208166: Still unable to use custom SSLEngine with default TrustManagerFactory after JDK-8207029
Reviewed-by: ascarpino
2018-07-25 17:21:04 -07:00
Jamil Nimeh
8158cca17d 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-25 09:48:31 -07:00
Weijun Wang
32a2f54b64 8207223: SSL Handshake failures are reported with more generic SSLException
Reviewed-by: xuelei
2018-07-21 21:46:42 +08:00
Jamil Nimeh
8eb45613db 8208350: Disable all DES cipher suites
Reviewed-by: xuelei, mullan
2018-08-20 15:37:47 -07:00
Mikael Vidstedt
95db6924f2 Merge 2018-08-20 14:19:30 -07:00
Xue-Lei Andrew Fan
611c53c860 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 18:16:47 -07:00
Weijun Wang
33a96c6df9 8209416: Refactoring GetPropertyAction calls in security libs
Reviewed-by: xuelei, rriggs
2018-08-14 22:39:34 +08:00
Weijun Wang
a825fe0a2d 8207250: setUseClientMode post handshake with the same value as before does not throw IAE
Reviewed-by: xuelei
2018-07-19 00:14:29 +08:00
Adam Petcher
108461949f 8206929: Check session context for TLS 1.3 session resumption
Additional checks to prevent TLS 1.3 sessions from being resumed when they shouldn't

Reviewed-by: xuelei
2018-07-17 13:04:40 -04:00
Xue-Lei Andrew Fan
a98ec3e8bd 8207029: Unable to use custom SSLEngine with default TrustManagerFactory after updating to JDK 11 b21
Reviewed-by: wetmore
2018-07-13 07:08:59 -07:00
Sibabrata Sahoo
99f911cc71 8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
Fixed SSLSessionImpl.getLocalPrincipal() implementation when client side authentication is not enabled.

Reviewed-by: xuelei
2018-07-04 11:49:46 -07:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Lana Steuck
c8c8cd7238 Merge 2018-01-04 04:22:28 +00:00
Xue-Lei Andrew Fan
755fa4beb7 8193683: Increase the number of clones in the CloneableDigest
Reviewed-by: coffeys, wetmore
2017-12-21 05:51:38 +00:00
Alan Bateman
7b054f30b8 8193758: Update copyright headers of files in src tree that are missing Classpath exception
Reviewed-by: mchung, mr, jjg, iris, prr
2017-12-19 10:03:36 +00:00
Xue-Lei Andrew Fan
82bf0799c6 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Co-authored-by: Martin Balao <mbalao@redhat.com>
Reviewed-by: jnimeh, ahgross, rhalade, wetmore
2017-12-08 16:41:30 +00:00
Christoph Dreis
7f79fffba6 8190382: fix small typographic errors in comments
Reviewed-by: martin
2017-10-30 17:49:33 -07:00
Christoph Dreis
674b927865 8190323: "the the" typos
Reviewed-by: rriggs
2017-10-29 18:20:53 -04:00
Rob McKenna
1fc8d0cfd9 8184328: JDK 8u131 socketRead0 hang at SSL read
Reviewed-by: xuelei, chegar, coffeys
2017-09-26 19:19:09 +01:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00