archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-28 15:24:43 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
58720 commits 316 branches 1041 tags 2.2 GiB
Commit graph

122 commits

Author SHA1 Message Date
Xue-Lei Andrew Fan
e6304dcaad 8232424: More constrained algorithms 
Reviewed-by: jnimeh, rhalade, ahgross
 2019-10-28 10:43:58 -07:00
Xue-Lei Andrew Fan
123febeb98 8229733: TLS message handling improvements 
Reviewed-by: jnimeh, rhalade, ahgross
 2019-10-20 13:42:44 -07:00
Xue-Lei Andrew Fan
ed00873148 8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension 
Reviewed-by: ascarpino
 2020-04-05 20:17:08 -07:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only) 
Reviewed-by: weijun
 2020-04-01 18:38:05 -07:00
Xue-Lei Andrew Fan
36af90acc0 8215712: Parsing extension failure may alert decode_error 
Reviewed-by: jnimeh
 2020-03-22 09:30:16 -07:00
Xue-Lei Andrew Fan
d243e40f7b 8241039: Retire the deprecated SSLSession.getPeerCertificateChain() method 
Reviewed-by: mullan, alanb, dfuchs
 2020-03-20 09:15:00 -07:00
Alexey Bakhtin
14e37ba3df 8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException 
Reviewed-by: xuelei
 2020-03-11 19:14:08 +03:00
Xue-Lei Andrew Fan
89448a83d9 8233619: SSLEngine handshake status immediately after the handshake can be NOT_HANDSHAKING rather than FINISHED with TLSv1.3 
Reviewed-by: jnimeh
 2020-03-03 15:57:01 -08:00
Mikael Vidstedt
3318314c7c 8237589: Fix copyright header formatting 
Reviewed-by: jjg, serb, iris, jwilhelm
 2020-01-21 14:23:01 -08:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00
Henry Jen
ae81cfa30f Merge 2020-01-15 01:54:35 +00:00
Anthony Scarpino
7ed4930a8e 8236098: AlgorithmConstraints:permits method not throwing IAEx when primitives are empty 
Reviewed-by: xuelei
 2020-01-08 13:25:03 -08:00
Jesper Wilhelmsson
943b87ddde Merge 2020-01-09 20:21:53 +01:00
Jamil Nimeh
8a1b5ad914 8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3 
Reviewed-by: xuelei
 2020-01-05 21:04:39 -08:00
Sibabrata Sahoo
fca342f736 8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property 
Corrected Cipher Suites ordering through system properties

Reviewed-by: xuelei
 2019-12-16 00:23:50 -08:00
Sibabrata Sahoo
58cce5fbf4 8234728: Some security tests should support TLSv1.3 
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
 2019-12-13 01:43:14 -08:00
Xue-Lei Andrew Fan
c185319515 8235655: Clean the duplicated block in SSLContextImpl 
Reviewed-by: coffeys
 2019-12-10 09:31:40 -08:00
Jamil Nimeh
c5f884c6d1 8231780: Better TLS messaging support 
Reviewed-by: ascarpino, rhalade, mschoene
 2019-10-28 18:53:51 -07:00
Xue-Lei Andrew Fan
10b010d0f5 8229728: Implement negotiation parameters 
Reviewed-by: jnimeh, ahgross, rhalade
 2019-09-10 17:13:48 -07:00
Xue-Lei Andrew Fan
3ba75a656a 8235311: Tag mismatch may alert bad_record_mac 
Reviewed-by: mullan
 2019-12-10 07:07:49 -08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols 
Reviewed-by: mullan, wetmore, xuelei
 2019-12-09 21:38:12 -08:00
Xue-Lei Andrew Fan
baebce3d2f 8235448: code cleanup in SSLContextImpl.java 
Reviewed-by: jnimeh
 2019-12-09 10:56:27 -08:00
Xue-Lei Andrew Fan
96a8b9796d 8235263: Revert TLS 1.3 change that wrapped IOExceptions 
Reviewed-by: mullan
 2019-12-03 17:15:02 -08:00
Xue-Lei Andrew Fan
50714b0fb9 8235183: Remove the "HACK CODE" in comment 
Reviewed-by: jnimeh
 2019-12-02 10:42:27 -08:00
Xue-Lei Andrew Fan
5161ab9493 8233954: UnsatisfiedLinkError or NoSuchAlgorithmException after removing sunec.dll 
Reviewed-by: ascarpino
 2019-11-21 18:42:33 -08:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries 
Reviewed-by: coffeys
 2019-11-12 01:36:17 -08:00
Xue-Lei Andrew Fan
12beed6ec9 8233621: Mismatch in jsse.enableMFLNExtension property name 
Reviewed-by: mullan
 2019-11-08 18:35:33 -08:00
Xue-Lei Andrew Fan
b7f557e5c7 8223940: Private key not supported by chosen signature algorithm 
Reviewed-by: valeriep
 2019-11-06 09:45:04 -08:00
Anthony Scarpino
0e9916f25b 8228825: Enhance ECDSA operations 
Reviewed-by: mullan
 2019-10-04 13:44:11 -07:00
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base 
Reviewed-by: rriggs, mullan
 2019-08-29 10:52:21 -07:00
Xue-Lei Andrew Fan
c299c4fd46 8228757: Fail fast if the handshake type is unknown 
Reviewed-by: jnimeh
 2019-08-19 12:56:48 -07:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups 
Reviewed-by: mullan
 2019-08-12 21:36:29 -07:00
Anthony Scarpino
81db7083a7 8228396: Re-enable Stateless Resumption On by default for merge to mainline 
Reviewed-by: jnimeh
 2019-07-18 13:58:34 -07:00
Anthony Scarpino
200254b479 8226338: Updates to Stateless Resumption 
Reviewed-by: xuelei, jnimeh
 2019-07-17 14:37:50 -07:00
Anthony Scarpino
bc7a8842a3 8227551: Session Resumption without Server-Side State off by default 
Reviewed-by: xuelei, jnimeh, jjiang
 2019-07-17 12:31:21 -07:00
Jamil Nimeh
86be0cd272 8222678: Improve TLS negotiation 
Reviewed-by: mullan, rhalade, mschoene
 2019-05-02 17:43:26 -07:00
Xue-Lei Andrew Fan
e06d193456 8218863: Better endpoint checks 
Reviewed-by: ahgross, jnimeh, mullan, rhalade
 2019-02-27 13:58:04 -08:00
Xue-Lei Andrew Fan
dbf62785ef 8225766: Curve in certificate should not affect signature scheme when using TLSv1.3 
Reviewed-by: ascarpino
 2019-06-19 21:49:33 -07:00
Xue-Lei Andrew Fan
a4277e56c8 8224829: AsyncSSLSocketClose.java has timing issue 
Reviewed-by: jnimeh, dfuchs
 2019-06-14 12:19:14 -07:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS 
Reviewed-by: xuelei, mullan
 2019-06-12 18:58:00 -07:00
Anthony Scarpino
94e1d7530f 8211018: Session Resumption without Server-Side State 
Reviewed-by: xuelei, jnimeh, jjiang
 2019-06-11 16:31:37 -07:00
Martin Balao
ebf8e1c0ac 8223482: Unsupported ciphersuites may be offered by a TLS client 
Reviewed-by: xuelei
 2019-05-28 19:01:38 -03:00
Xue-Lei Andrew Fan
7aec6727ac 8221253: TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1 bytes 
Reviewed-by: jnimeh
 2019-05-10 12:33:40 -07:00
Xue-Lei Andrew Fan
62109f5906 8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl 
Reviewed-by: alanb, dfuchs
 2019-05-06 08:54:19 -07:00
Xue-Lei Andrew Fan
eb59ebb177 8216326: SSLSocket stream close() does not close the associated socket 
Reviewed-by: jnimeh
 2019-04-16 16:59:09 -07:00
Valerie Peng
3b6b6b3cb3 8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange 
Add internal Signature init methods to select provider based on both key and parameter

Reviewed-by: xuelei
 2019-04-10 02:35:18 +00:00
Xue-Lei Andrew Fan
8263b618ba 8221882: Use fiber-friendly java.util.concurrent.locks in JSSE 
Reviewed-by: alanb, dfuchs
 2019-04-05 11:28:23 -07:00
Xue-Lei Andrew Fan
d812742d68 8163326: Update the default enabled cipher suites preference 
Reviewed-by: mullan
 2019-04-04 14:19:29 -07:00
Xue-Lei Andrew Fan
661b5f1534 8217610: TLSv1.3 fail with ClassException when EC keys are stored in PKCS11 
Reviewed-by: valeriep
 2019-04-03 16:23:22 -07:00
Xue-Lei Andrew Fan
2eb8492163 8168261: Use server cipher suites preference by default 
Reviewed-by: mullan
 2019-04-01 16:50:17 -07:00