866 Commits

Author SHA1 Message Date
Ferenc Rakoczi
9cfb0f7f7a 8341527: AVX-512 intrinsic for SHA3
Reviewed-by: sviswanathan
2024-10-29 15:18:24 +00:00
Mark Powers
ca1700b8bf 8336665: CCE in X509CRLImpl$TBSCertList.getCertIssuer
Reviewed-by: mullan
2024-10-24 23:09:45 +00:00
Seán Coffey
c44d524cee Merge branch 'master' into 8044609-ssl 2024-10-15 13:46:25 +00:00
Hai-May Chao
dadcee1b89 8307383: Enhance DTLS connections
Co-authored-by: Jamil Nimeh <jnimeh@openjdk.org>
Reviewed-by: rhalade, mschoene, ascarpino
2024-10-15 17:04:27 +05:30
Valerie Peng
369c573383 8302111: Serialization considerations
Reviewed-by: skoivu, rhalade, weijun, wetmore
2024-10-15 17:04:27 +05:30
Weijun Wang
3f53d57134 8340327: A common framework to support public key algorithms with standard parameter sets
Reviewed-by: ascarpino, mullan
2024-10-11 21:16:41 +00:00
Jamil Nimeh
b6e72ff971 8339403: sun.security.ssl.StatusResponseManager.get swallows interrupt status
Reviewed-by: valeriep
2024-10-03 17:16:31 +00:00
Eirik Bjørsnøs
0f381137cb 8341243: Use ArraySupport.SOFT_MAX_ARRAY_LENGTH for max array size in java.base
Reviewed-by: jpai, smarks
2024-10-02 01:27:03 +00:00
Rajan Halade
f554c3ffce 8341059: Change Entrust TLS distrust date to November 12, 2024
Reviewed-by: mullan
2024-09-27 17:16:13 +00:00
Francisco Ferrari Bihurriet
c6f1d5f374 8319332: Security properties files inclusion
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: weijun, mullan, kdriver
2024-09-23 17:45:38 +00:00
Prasadrao Koppula
c9bee173d6 8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options
Reviewed-by: coffeys, mullan
2024-09-19 13:21:08 +00:00
Jaikiran Pai
1d39249231 8339834: Replace usages of -mx and -ms in some tests
Reviewed-by: aivanov, ascarpino, prr, dholmes
2024-09-12 02:02:14 +00:00
Ferenc Rakoczi
c54fc08aa3 8338587: Internal XOF Methods for SHAKE128 and SHAKE256
Reviewed-by: valeriep, weijun
2024-09-09 13:49:34 +00:00
Hai-May Chao
8fb8cd85b7 8339347: keytool -importpass insists prompting the user even if there is no terminal
Reviewed-by: weijun
2024-09-05 20:17:52 +00:00
Seán Coffey
4effe97ff6 Remove pluggability help reference 2024-09-04 08:19:53 +00:00
Seán Coffey
902453c63d Merge branch 'master' into 8044609-ssl 2024-09-04 08:15:53 +00:00
Mark Powers
bbb516163d 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs
Reviewed-by: mullan, rhalade
2024-09-03 19:55:58 +00:00
Anthony Scarpino
0c2b175898 8328608: Multiple NewSessionTicket support for TLS
Reviewed-by: djelinski
2024-08-28 17:24:33 +00:00
Weijun Wang
b5b5a5b8e5 8336667: IAE in DerInputStream.toByteArray
Reviewed-by: valeriep
2024-07-25 17:11:59 +00:00
Ben Perez
4c91d5cb41 8322133: getParameterSpec(ECGenParameterSpec.class) on EC AlgorithmParameters does not return standard names
Reviewed-by: mullan
2024-07-23 19:35:11 +00:00
Hai-May Chao
fd741a88e8 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
Reviewed-by: wetmore
2024-07-21 17:05:46 +00:00
Prajwal Kumaraswamy
1b9270ac8a 8328723: IP Address error when client enables HTTPS endpoint check on server socket
Reviewed-by: wetmore, djelinski
2024-07-18 22:42:34 +00:00
Seán Coffey
e7d42d4d3e Merge branch 'master' into 8044609-ssl 2024-07-15 12:49:33 +00:00
Anthony Scarpino
07bc523df8 8334670: SSLSocketOutputRecord buffer miscalculation
Reviewed-by: djelinski, ssahoo
2024-06-26 22:28:33 +00:00
Volodymyr Paprotski
f101e153ce 8333583: Crypto-XDH.generateSecret regression after JDK-8329538
Reviewed-by: sviswanathan, kvn, ascarpino
2024-06-25 22:31:39 +00:00
Ferenc Rakoczi
75bea280b9 8333867: SHA3 performance can be improved
Reviewed-by: kvn, valeriep
2024-06-21 14:16:23 +00:00
nibjen
e681b4e9b3 8332524: Instead of printing "TLSv1.3," it is showing "TLS13"
Reviewed-by: mullan
2024-06-18 13:28:37 +00:00
Seán Coffey
a1003b9537 Merge branch 'master' into 8044609-ssl 2024-06-04 18:36:42 +00:00
John Jiang
c0ce7d871f 8333046: Clean codes in sun.security.util.math
Reviewed-by: weijun
2024-06-01 05:58:00 +00:00
Pavel Rappo
3cff588a31 8332826: Make hashCode methods in ArraysSupport friendlier
Reviewed-by: redestad, liach
2024-05-30 09:33:30 +00:00
Seán Coffey
1c4250ab49 all ssl mode only if ssl specified by itself 2024-05-23 13:39:12 +00:00
Volodymyr Paprotski
afed7d0b05 8329538: Accelerate P256 on x86_64 using Montgomery intrinsic
Reviewed-by: ihse, ascarpino, sviswanathan
2024-05-22 16:27:27 +00:00
Seán Coffey
826ad29b55 Merge branch 'master' into 8044609-ssl 2024-05-21 09:34:48 +00:00
Ben Perez
cd3a607576 8328864: NullPointerException in sun.security.jca.ProviderList.getService()
Reviewed-by: weijun
2024-05-02 18:50:38 +00:00
Seán Coffey
27178fb890 indentation 2024-04-26 15:10:26 +00:00
Jonathan Gibbons
9cc163a999 8330178: Clean up non-standard use of /** comments in java.base
Reviewed-by: darcy, iris, dfuchs, aivanov, naoto
2024-04-23 18:43:36 +00:00
Seán Coffey
277583cd1d Allow ssl,<option> type syntax as currently done. Improve test case coverage 2024-04-17 14:07:53 +00:00
Weijun Wang
0203c7e612 8318340: Improve RSA key implementations
Reviewed-by: rhalade, mschoene, valeriep, mullan
2024-04-16 11:17:05 +05:30
Seán Coffey
bc0d61073c Tighten up ssl parsing 2024-04-12 15:38:46 +00:00
Seán Coffey
d87c9748be Initial commit 2024-04-12 14:54:17 +00:00
Sean Mullan
e702646545 8200566: DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails
Reviewed-by: weijun
2024-04-08 20:08:56 +00:00
Sean Coffey
3b582dff84 8051959: Add thread and timestamp options to java.security.debug system property
Reviewed-by: mullan, weijun
2024-04-02 08:51:13 +00:00
Aleksey Shipilev
4a14cba2f1 8329213: Better validation for com.sun.security.ocsp.useget option
Reviewed-by: mullan
2024-04-01 17:27:00 +00:00
Weijun Wang
59c2aff1ed 8323624: ProviderList.ServiceList does not need to be a list
Reviewed-by: mullan
2024-03-29 15:23:26 +00:00
Eirik Bjørsnøs
4eefda9102 8327779: Remove deprecated internal field sun.security.x509.X509Key.key
Reviewed-by: mullan
2024-03-28 20:00:07 +00:00
Aleksey Shipilev
614db2ea9e 8328638: Fallback option for POST-only OCSP requests
Reviewed-by: mullan, rhalade
2024-03-27 14:44:50 +00:00
Prasadrao Koppula
d44aaa37f9 8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message
Reviewed-by: djelinski, coffeys, jjiang, ascarpino
2024-03-22 07:02:37 +00:00
John Jiang
9059727df1 8327182: Move serverAlias into the loop
Reviewed-by: gli, mullan
2024-03-19 02:03:13 +00:00
Weijun Wang
569b05addf 8327818: Implement Kerberos debug with sun.security.util.Debug
Reviewed-by: coffeys, ssahoo
2024-03-18 15:36:28 +00:00
Daniel Jeliński
8f9899b23e 8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode
Reviewed-by: valeriep
2024-03-13 19:09:52 +00:00