244 Commits

Author SHA1 Message Date
Xue-Lei Andrew Fan
02cc064144 8234037: Improve Object Identifier Processing
Reviewed-by: weijun, mschoene, ssahoo
2019-11-25 07:24:17 -08:00
Jamil Nimeh
c5f884c6d1 8231780: Better TLS messaging support
Reviewed-by: ascarpino, rhalade, mschoene
2019-10-28 18:53:51 -07:00
Sean Mullan
a0f8febb8b 8230318: Better trust store usage
Reviewed-by: weijun, rhalade, ahgross
2019-10-22 17:25:34 -04:00
Weijun Wang
f3815c85a1 8231139: Improved keystore support
Reviewed-by: mullan, ahgross
2019-10-09 17:42:38 +08:00
Xue-Lei Andrew Fan
10b010d0f5 8229728: Implement negotiation parameters
Reviewed-by: jnimeh, ahgross, rhalade
2019-09-10 17:13:48 -07:00
Sean Mullan
6cb8dfa9e3 8227758: More valid PKIX processing
Reviewed-by: xuelei, rhalade, coffeys, mschoene
2019-08-26 13:57:51 -04:00
Anthony Scarpino
ca112043f1 8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
Reviewed-by: mullan, xuelei, weijun
2019-12-18 12:10:09 -08:00
Sibabrata Sahoo
fca342f736 8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property
Corrected Cipher Suites ordering through system properties

Reviewed-by: xuelei
2019-12-16 00:23:50 -08:00
Sibabrata Sahoo
58cce5fbf4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-13 01:43:14 -08:00
Xue-Lei Andrew Fan
c185319515 8235655: Clean the duplicated block in SSLContextImpl
Reviewed-by: coffeys
2019-12-10 09:31:40 -08:00
Xue-Lei Andrew Fan
3ba75a656a 8235311: Tag mismatch may alert bad_record_mac
Reviewed-by: mullan
2019-12-10 07:07:49 -08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
2019-12-09 21:38:12 -08:00
Xue-Lei Andrew Fan
baebce3d2f 8235448: code cleanup in SSLContextImpl.java
Reviewed-by: jnimeh
2019-12-09 10:56:27 -08:00
Xue-Lei Andrew Fan
96a8b9796d 8235263: Revert TLS 1.3 change that wrapped IOExceptions
Reviewed-by: mullan
2019-12-03 17:15:02 -08:00
Weijun Wang
bc19b64856 8234744: KeyStore.store can write wrong type of file
Reviewed-by: mullan
2019-12-03 14:38:18 +08:00
Xue-Lei Andrew Fan
50714b0fb9 8235183: Remove the "HACK CODE" in comment
Reviewed-by: jnimeh
2019-12-02 10:42:27 -08:00
Xue-Lei Andrew Fan
5161ab9493 8233954: UnsatisfiedLinkError or NoSuchAlgorithmException after removing sunec.dll
Reviewed-by: ascarpino
2019-11-21 18:42:33 -08:00
Weijun Wang
d5b423d17c 8234377: new BitArray(0).toString() throws ArrayIndexOutOfBoundsException
Reviewed-by: mullan, wetmore
2019-11-20 08:12:14 +08:00
Weijun Wang
c0d097eac6 8214024: Remove the default keytool -keyalg value
Reviewed-by: mullan
2019-11-15 09:06:58 +08:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
2019-11-12 01:36:17 -08:00
Xue-Lei Andrew Fan
12beed6ec9 8233621: Mismatch in jsse.enableMFLNExtension property name
Reviewed-by: mullan
2019-11-08 18:35:33 -08:00
Xue-Lei Andrew Fan
b7f557e5c7 8223940: Private key not supported by chosen signature algorithm
Reviewed-by: valeriep
2019-11-06 09:45:04 -08:00
Weijun Wang
a66829bc89 8231950: keytool -ext camel-case shorthand not working
Reviewed-by: mullan
2019-11-04 14:26:18 +08:00
Weijun Wang
72330c70d7 8231598: keytool does not export sun.security.mscapi
Reviewed-by: mullan
2019-10-24 15:53:20 +08:00
Henry Jen
8d141f1048 Merge 2019-10-14 21:01:25 +00:00
Anthony Scarpino
0e9916f25b 8228825: Enhance ECDSA operations
Reviewed-by: mullan
2019-10-04 13:44:11 -07:00
Joe Darcy
fbb4093562 8231262: Suppress warnings on non-serializable instance fields in security libs serializable classes
Reviewed-by: mullan, chegar
2019-10-09 09:57:41 -07:00
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
2019-08-29 10:52:21 -07:00
Ivan Gerasimov
3ed845784d 8226831: Use Objects.equals() when appropriate
Reviewed-by: rriggs, bpb
2019-08-27 14:44:21 -07:00
Jamil Nimeh
d096e033d0 8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
Reviewed-by: mullan
2019-08-22 14:09:36 -07:00
Xue-Lei Andrew Fan
c299c4fd46 8228757: Fail fast if the handshake type is unknown
Reviewed-by: jnimeh
2019-08-19 12:56:48 -07:00
Claes Redestad
2c245bd2b9 8229773: Resolve permissions for code source URLs lazily
Reviewed-by: alanb, mullan, rriggs, dfuchs
2019-08-19 06:13:52 +02:00
Valerie Peng
effe3eb806 8228613: java.security.Provider#getServices order is no longer deterministic
Changed to use SunEntries.DEF_SECURE_RANDOM_ALGO instead of relying on ordering of SecureRandom services

Reviewed-by: weijun
2019-08-14 00:57:15 +00:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
2019-08-12 21:36:29 -07:00
Mikael Vidstedt
895db11053 Merge 2019-07-29 09:59:04 -07:00
Leo Jiang
4b791747ef 8228623: Update copyright year to 2019 for several java properties file
Reviewed-by: naoto
2019-07-26 11:47:50 +08:00
Anthony Scarpino
81db7083a7 8228396: Re-enable Stateless Resumption On by default for merge to mainline
Reviewed-by: jnimeh
2019-07-18 13:58:34 -07:00
Mikael Vidstedt
f73a94a772 Merge 2019-07-23 11:17:59 -07:00
Mikael Vidstedt
f08a9de3b2 Merge 2019-07-17 04:33:37 -07:00
Mikael Vidstedt
cfcd0223a9 Merge 2019-07-12 02:50:43 -07:00
Valerie Peng
175faeeadf 8225745: NoSuchAlgorithmException exception for SHA256withECDSA with RSASSA-PSS support
Fixed SignatureUtil and ECDSA signature impl to handle EC parameters

Reviewed-by: weijun
2019-07-11 20:11:47 +00:00
Leo Jiang
8c3e30202b 8227009: JDK 13 L10n resource files update - msgdrop 10
Reviewed-by: naoto
2019-07-10 01:19:18 -07:00
Mikael Vidstedt
e9d003926b Merge 2019-07-10 07:27:58 -07:00
Philipp Kunz
b6d1b1e085 8217375: jarsigner breaks old signature with long lines in manifest
Reviewed-by: jjiang, weijun
2019-07-18 08:53:06 +08:00
Anthony Scarpino
200254b479 8226338: Updates to Stateless Resumption
Reviewed-by: xuelei, jnimeh
2019-07-17 14:37:50 -07:00
Anthony Scarpino
bc7a8842a3 8227551: Session Resumption without Server-Side State off by default
Reviewed-by: xuelei, jnimeh, jjiang
2019-07-17 12:31:21 -07:00
Sean Mullan
a7a94701fe 8226307: Curve names should be case-insensitive
Reviewed-by: igerasim, jnimeh, wetmore
2019-06-21 08:38:26 -04:00
Xue-Lei Andrew Fan
dbf62785ef 8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
Reviewed-by: ascarpino
2019-06-19 21:49:33 -07:00
Weijun Wang
c12cf04011 8225392: Comparison builds are failing due to cacerts file
Reviewed-by: erikj, martin, mullan
2019-06-15 14:39:04 +08:00
Xue-Lei Andrew Fan
a4277e56c8 8224829: AsyncSSLSocketClose.java has timing issue
Reviewed-by: jnimeh, dfuchs
2019-06-14 12:19:14 -07:00