17 Commits

Author SHA1 Message Date
Sean Mullan
dc6ec2a467 8284105: Update security libraries to use sealed classes
Reviewed-by: darcy, weijun, xuelei
2022-04-11 18:01:47 +00:00
Weijun Wang
262d07001b 8277246: Check for NonRepudiation as well when validating a TSA certificate
Reviewed-by: xuelei, mullan
2021-11-17 20:03:55 +00:00
Sean Mullan
89f5c96d63 8232066: Remove outdated code/methods from PKIX implementation
Reviewed-by: weijun
2021-07-30 12:43:20 +00:00
Sean Mullan
fc80a6b493 8270946: X509CertImpl.getFingerprint should not return the empty String
Reviewed-by: weijun
2021-07-27 13:49:03 +00:00
Weijun Wang
6765f90250 8266459: Implement JEP 411: Deprecate the Security Manager for Removal
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: erikj, darcy, chegar, naoto, joehw, alanb, mchung, kcr, prr, lancea
2021-06-02 11:57:31 +00:00
Sean Mullan
7232e3c704 8249906: Enhance opening JARs
Reviewed-by: weijun, rhalade, mschoene
2021-04-20 21:45:52 +00:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Martin Balao
1c651455a7 8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one
Reviewed-by: mullan
2020-04-02 18:18:23 -03:00
Sean Mullan
a0f8febb8b 8230318: Better trust store usage
Reviewed-by: weijun, rhalade, ahgross
2019-10-22 17:25:34 -04:00
Sean Mullan
6cb8dfa9e3 8227758: More valid PKIX processing
Reviewed-by: xuelei, rhalade, coffeys, mschoene
2019-08-26 13:57:51 -04:00
Joe Darcy
fbb4093562 8231262: Suppress warnings on non-serializable instance fields in security libs serializable classes
Reviewed-by: mullan, chegar
2019-10-09 09:57:41 -07:00
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
2019-08-29 10:52:21 -07:00
Jamil Nimeh
d096e033d0 8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
Reviewed-by: mullan
2019-08-22 14:09:36 -07:00
Sean Mullan
c9bea6a8ea 8216280: Allow later Symantec Policy distrust date for two Apple SubCAs
Reviewed-by: coffeys
2019-01-22 09:27:19 -05:00
Sean Mullan
dfd58a59ff 8207258: Distrust TLS server certificates anchored by Symantec Root CAs
Reviewed-by: weijun
2018-12-11 13:22:20 -05:00
Weijun Wang
33a96c6df9 8209416: Refactoring GetPropertyAction calls in security libs
Reviewed-by: xuelei, rriggs
2018-08-14 22:39:34 +08:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00