Ben Perez
13987b4244
8298390: Implement JEP 496: Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism
...
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: valeriep
2024-11-22 16:36:52 +00:00
Andrey Turbanov
78602be1fe
8344024: Unnecessary Hashtable usage in RSAPSSSignature.DIGEST_LENGTHS
...
Reviewed-by: valeriep
2024-11-19 16:59:06 +00:00
Jaikiran Pai
a91d4c022f
8344233: Remove calls to SecurityManager and doPrivileged in java.net.ProxySelector and sun.net.spi.DefaultProxySelector after JEP 486 integration
...
Reviewed-by: dfuchs
2024-11-16 11:39:20 +00:00
Eirik Bjørsnøs
73fd8919f5
8344216: Remove calls to SecurityManager and and doPrivileged in java.net.Authenticator, java.net.CookieHandler, and java.net.ResponseCache after JEP 486 integration
...
Reviewed-by: dfuchs
2024-11-15 19:21:30 +00:00
Artur Barashev
697f27c5d5
8341964: Add mechanism to disable different parts of TLS cipher suite
...
Reviewed-by: mullan, ascarpino
2024-11-14 17:44:13 +00:00
Sean Mullan
db85090553
8338411: Implement JEP 486: Permanently Disable the Security Manager
...
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Brian Burkhalter <bpb@openjdk.org>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Co-authored-by: Harshitha Onkar <honkar@openjdk.org>
Co-authored-by: Joe Wang <joehw@openjdk.org>
Co-authored-by: Jorn Vernee <jvernee@openjdk.org>
Co-authored-by: Justin Lu <jlu@openjdk.org>
Co-authored-by: Kevin Walls <kevinw@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Naoto Sato <naoto@openjdk.org>
Co-authored-by: Roger Riggs <rriggs@openjdk.org>
Co-authored-by: Brent Christian <bchristi@openjdk.org>
Co-authored-by: Stuart Marks <smarks@openjdk.org>
Co-authored-by: Ian Graves <igraves@openjdk.org>
Co-authored-by: Phil Race <prr@openjdk.org>
Co-authored-by: Erik Gahlin <egahlin@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Reviewed-by: kevinw, aivanov, rriggs, lancea, coffeys, dfuchs, ihse, erikj, cjplummer, coleenp, naoto, mchung, prr, weijun, joehw, azvegint, psadhukhan, bchristi, sundar, attila
2024-11-12 17:16:15 +00:00
Patricio Chilano Mateo
78b80150e0
8338383: Implement JEP 491: Synchronize Virtual Threads without Pinning
...
Co-authored-by: Patricio Chilano Mateo <pchilanomate@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Andrew Haley <aph@openjdk.org>
Co-authored-by: Fei Yang <fyang@openjdk.org>
Co-authored-by: Coleen Phillimore <coleenp@openjdk.org>
Co-authored-by: Richard Reingruber <rrich@openjdk.org>
Co-authored-by: Martin Doerr <mdoerr@openjdk.org>
Reviewed-by: aboldtch, dholmes, coleenp, fbredberg, dlong, sspitsyn
2024-11-12 15:23:48 +00:00
Kevin Driver
2a1ae0ff89
8331008: Implement JEP 478: Key Derivation Function API (Preview)
...
Co-authored-by: Rajan Halade <rhalade@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Valerie Peng <valeriep@openjdk.org>
Reviewed-by: weijun, valeriep
2024-11-05 21:07:52 +00:00
Artur Barashev
8b4749713c
8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server
...
Reviewed-by: wetmore, djelinski, xuelei
2024-11-04 18:46:38 +00:00
Ferenc Rakoczi
9cfb0f7f7a
8341527: AVX-512 intrinsic for SHA3
...
Reviewed-by: sviswanathan
2024-10-29 15:18:24 +00:00
Mark Powers
ca1700b8bf
8336665: CCE in X509CRLImpl$TBSCertList.getCertIssuer
...
Reviewed-by: mullan
2024-10-24 23:09:45 +00:00
Hai-May Chao
dadcee1b89
8307383: Enhance DTLS connections
...
Co-authored-by: Jamil Nimeh <jnimeh@openjdk.org>
Reviewed-by: rhalade, mschoene, ascarpino
2024-10-15 17:04:27 +05:30
Valerie Peng
369c573383
8302111: Serialization considerations
...
Reviewed-by: skoivu, rhalade, weijun, wetmore
2024-10-15 17:04:27 +05:30
Weijun Wang
3f53d57134
8340327: A common framework to support public key algorithms with standard parameter sets
...
Reviewed-by: ascarpino, mullan
2024-10-11 21:16:41 +00:00
Jamil Nimeh
b6e72ff971
8339403: sun.security.ssl.StatusResponseManager.get swallows interrupt status
...
Reviewed-by: valeriep
2024-10-03 17:16:31 +00:00
Eirik Bjørsnøs
0f381137cb
8341243: Use ArraySupport.SOFT_MAX_ARRAY_LENGTH for max array size in java.base
...
Reviewed-by: jpai, smarks
2024-10-02 01:27:03 +00:00
Rajan Halade
f554c3ffce
8341059: Change Entrust TLS distrust date to November 12, 2024
...
Reviewed-by: mullan
2024-09-27 17:16:13 +00:00
Francisco Ferrari Bihurriet
c6f1d5f374
8319332: Security properties files inclusion
...
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: weijun, mullan, kdriver
2024-09-23 17:45:38 +00:00
Prasadrao Koppula
c9bee173d6
8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options
...
Reviewed-by: coffeys, mullan
2024-09-19 13:21:08 +00:00
Jaikiran Pai
1d39249231
8339834: Replace usages of -mx and -ms in some tests
...
Reviewed-by: aivanov, ascarpino, prr, dholmes
2024-09-12 02:02:14 +00:00
Ferenc Rakoczi
c54fc08aa3
8338587: Internal XOF Methods for SHAKE128 and SHAKE256
...
Reviewed-by: valeriep, weijun
2024-09-09 13:49:34 +00:00
Hai-May Chao
8fb8cd85b7
8339347: keytool -importpass insists prompting the user even if there is no terminal
...
Reviewed-by: weijun
2024-09-05 20:17:52 +00:00
Mark Powers
bbb516163d
8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs
...
Reviewed-by: mullan, rhalade
2024-09-03 19:55:58 +00:00
Anthony Scarpino
0c2b175898
8328608: Multiple NewSessionTicket support for TLS
...
Reviewed-by: djelinski
2024-08-28 17:24:33 +00:00
Weijun Wang
b5b5a5b8e5
8336667: IAE in DerInputStream.toByteArray
...
Reviewed-by: valeriep
2024-07-25 17:11:59 +00:00
Ben Perez
4c91d5cb41
8322133: getParameterSpec(ECGenParameterSpec.class) on EC AlgorithmParameters does not return standard names
...
Reviewed-by: mullan
2024-07-23 19:35:11 +00:00
Hai-May Chao
fd741a88e8
8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
...
Reviewed-by: wetmore
2024-07-21 17:05:46 +00:00
Prajwal Kumaraswamy
1b9270ac8a
8328723: IP Address error when client enables HTTPS endpoint check on server socket
...
Reviewed-by: wetmore, djelinski
2024-07-18 22:42:34 +00:00
Anthony Scarpino
07bc523df8
8334670: SSLSocketOutputRecord buffer miscalculation
...
Reviewed-by: djelinski, ssahoo
2024-06-26 22:28:33 +00:00
Volodymyr Paprotski
f101e153ce
8333583: Crypto-XDH.generateSecret regression after JDK-8329538
...
Reviewed-by: sviswanathan, kvn, ascarpino
2024-06-25 22:31:39 +00:00
Ferenc Rakoczi
75bea280b9
8333867: SHA3 performance can be improved
...
Reviewed-by: kvn, valeriep
2024-06-21 14:16:23 +00:00
nibjen
e681b4e9b3
8332524: Instead of printing "TLSv1.3," it is showing "TLS13"
...
Reviewed-by: mullan
2024-06-18 13:28:37 +00:00
John Jiang
c0ce7d871f
8333046: Clean codes in sun.security.util.math
...
Reviewed-by: weijun
2024-06-01 05:58:00 +00:00
Pavel Rappo
3cff588a31
8332826: Make hashCode methods in ArraysSupport friendlier
...
Reviewed-by: redestad, liach
2024-05-30 09:33:30 +00:00
Volodymyr Paprotski
afed7d0b05
8329538: Accelerate P256 on x86_64 using Montgomery intrinsic
...
Reviewed-by: ihse, ascarpino, sviswanathan
2024-05-22 16:27:27 +00:00
Ben Perez
cd3a607576
8328864: NullPointerException in sun.security.jca.ProviderList.getService()
...
Reviewed-by: weijun
2024-05-02 18:50:38 +00:00
Jonathan Gibbons
9cc163a999
8330178: Clean up non-standard use of /** comments in java.base
...
Reviewed-by: darcy, iris, dfuchs, aivanov, naoto
2024-04-23 18:43:36 +00:00
Weijun Wang
0203c7e612
8318340: Improve RSA key implementations
...
Reviewed-by: rhalade, mschoene, valeriep, mullan
2024-04-16 11:17:05 +05:30
Sean Mullan
e702646545
8200566: DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails
...
Reviewed-by: weijun
2024-04-08 20:08:56 +00:00
Sean Coffey
3b582dff84
8051959: Add thread and timestamp options to java.security.debug system property
...
Reviewed-by: mullan, weijun
2024-04-02 08:51:13 +00:00
Aleksey Shipilev
4a14cba2f1
8329213: Better validation for com.sun.security.ocsp.useget option
...
Reviewed-by: mullan
2024-04-01 17:27:00 +00:00
Weijun Wang
59c2aff1ed
8323624: ProviderList.ServiceList does not need to be a list
...
Reviewed-by: mullan
2024-03-29 15:23:26 +00:00
Eirik Bjørsnøs
4eefda9102
8327779: Remove deprecated internal field sun.security.x509.X509Key.key
...
Reviewed-by: mullan
2024-03-28 20:00:07 +00:00
Aleksey Shipilev
614db2ea9e
8328638: Fallback option for POST-only OCSP requests
...
Reviewed-by: mullan, rhalade
2024-03-27 14:44:50 +00:00
Prasadrao Koppula
d44aaa37f9
8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message
...
Reviewed-by: djelinski, coffeys, jjiang, ascarpino
2024-03-22 07:02:37 +00:00
John Jiang
9059727df1
8327182: Move serverAlias into the loop
...
Reviewed-by: gli, mullan
2024-03-19 02:03:13 +00:00
Weijun Wang
569b05addf
8327818: Implement Kerberos debug with sun.security.util.Debug
...
Reviewed-by: coffeys, ssahoo
2024-03-18 15:36:28 +00:00
Daniel Jeliński
8f9899b23e
8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode
...
Reviewed-by: valeriep
2024-03-13 19:09:52 +00:00
Hai-May Chao
ffd43c922e
8327461: KeyStore getEntry is not thread-safe
...
Reviewed-by: djelinski, weijun
2024-03-11 16:33:17 +00:00
Sean Mullan
c4845f01d2
8317431: Implement simpler Comparator when building certification paths
...
Reviewed-by: kdriver, weijun
2024-03-08 15:20:37 +00:00