558 Commits

Author SHA1 Message Date
Mandy Chung
9ffe7e1205 8211122: Reduce the number of internal classes made accessible to jdk.unsupported
Reviewed-by: alanb, dfuchs, kvn
2018-11-06 10:01:16 -08:00
Xue-Lei Andrew Fan
413d5e8c61 8212738: Incorrectly named signature scheme ecdsa_secp512r1_sha512
Reviewed-by: ascarpino
2018-10-30 19:47:16 -07:00
Jaikiran Pai
21341a37af 8212752: Typo in SSL log message related to inactive/disabled signature scheme
Reviewed-by: coffeys
2018-10-22 10:47:28 +01:00
Jamil Nimeh
137e3161c4 8211806: TLS 1.3 handshake server name indication is missing on a session resume
Reviewed-by: xuelei, wetmore
2018-10-19 18:05:50 -07:00
Adam Petcher
1c4396ebae 8208209: Improve TLS connection stability again
Reviewed-by: xuelei
2018-07-30 13:53:30 -04:00
Jamil Nimeh
a40d0a0ee1 8210989: RSASSA-PSS certificate cannot be selected for client auth on TLSv1.2
Reviewed-by: xuelei
2018-10-16 12:05:57 -07:00
Jamil Nimeh
180a8773fb 8211866: TLS 1.3 CertificateRequest message sometimes offers disallowed signature algorithms
Reviewed-by: xuelei
2018-10-16 11:24:41 -07:00
Claes Redestad
d5d74f0e26 8211860: Avoid reading security properties eagerly on Manifest class initialization
Reviewed-by: mullan, alanb
2018-10-08 18:16:03 +02:00
Ivan Gerasimov
2ae27da3bc 8200381: Typos in javadoc - missing verb "be" and alike
Reviewed-by: lancea, darcy, wetmore
2018-10-02 10:19:07 -07:00
Matthias Baesken
be56cc5bf3 8207768: Improve exception messages during manifest parsing of jar archives
Reviewed-by: clanger, mullan, weijun
2018-09-12 11:13:09 +02:00
Xue-Lei Andrew Fan
89a4157528 8210974: No extensions debug log for ClientHello
Reviewed-by: jnimeh, wetmore
2018-09-20 14:19:53 -07:00
Jamil Nimeh
a24c991cd3 8210846: TLSv.1.3 interop problems with OpenSSL 1.1.1 when used on the client side with mutual auth
Reviewed-by: wetmore
2018-09-19 16:07:03 -07:00
Jamil Nimeh
962e755c3a 8140466: ChaCha20 and Poly1305 TLS Cipher Suites
Reviewed-by: xuelei, mullan
2018-09-17 15:25:42 -07:00
Anthony Scarpino
b27f471bdd 8209031: SSLSocket should throw an exception when configuring DTLS
Reviewed-by: xuelei
2018-09-17 14:04:46 -07:00
Xue-Lei Andrew Fan
5de8b5c59a 8209916: NPE in SupportedGroupsExtension
Reviewed-by: jnimeh, wetmore
2018-09-13 17:11:04 -07:00
Xue-Lei Andrew Fan
b7fdc4943f 8210334: TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes
Reviewed-by: ascarpino, wetmore
2018-09-05 21:01:39 -07:00
Jesper Wilhelmsson
d40735db17 Merge 2018-08-29 19:48:28 +02:00
Adam Petcher
c3cc65bd08 8201317: X25519/X448 code improvements
Minor code/comment improvements

Reviewed-by: xuelei
2018-08-29 12:00:47 -04:00
Xue-Lei Andrew Fan
8b373393e6 8209965: The "supported_groups" extension in ServerHellos
Reviewed-by: ascarpino
2018-08-27 09:46:24 -07:00
Bradford Wetmore
5b511a4a78 8207317: SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy
Reviewed-by: xuelei
2018-08-21 11:30:48 -07:00
Rajan Halade
02a3769cfa 8206176: Remove the temporary tls13VN field
Reviewed-by: xuelei, wetmore
2018-08-14 17:21:44 -07:00
Xue-Lei Andrew Fan
66e8f27bd8 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 16:47:56 -07:00
Leo Jiang
6c703b8589 8207948: JDK 11 L10n resource file update msg drop 10
Reviewed-by: naoto
2018-07-25 22:48:53 -07:00
Xue-Lei Andrew Fan
d2b2780859 8208166: Still unable to use custom SSLEngine with default TrustManagerFactory after JDK-8207029
Reviewed-by: ascarpino
2018-07-25 17:21:04 -07:00
Jamil Nimeh
8158cca17d 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-25 09:48:31 -07:00
Valerie Peng
df08003471 8206171: Signature#getParameters for RSASSA-PSS throws ProviderException when not initialized
Changed SunRsaSign and SunMSCAPI provider to return null and updated javadoc

Reviewed-by: weijun, mullan
2018-07-23 23:18:19 +00:00
Weijun Wang
32a2f54b64 8207223: SSL Handshake failures are reported with more generic SSLException
Reviewed-by: xuelei
2018-07-21 21:46:42 +08:00
Anthony Scarpino
4e46cc1392 8204196: integer cleanup
Reviewed-by: xuelei
2018-07-20 09:55:15 -07:00
Ivan Gerasimov
acaf155de7 8209851: Algorithm name is compared via reference identity
Reviewed-by: mullan
2018-08-23 09:36:13 -07:00
Sean Coffey
50ec35819d 8209129: Further improvements to cipher buffer management
Reviewed-by: weijun, igerasim
2018-08-23 11:37:14 +01:00
Jamil Nimeh
8eb45613db 8208350: Disable all DES cipher suites
Reviewed-by: xuelei, mullan
2018-08-20 15:37:47 -07:00
Mikael Vidstedt
95db6924f2 Merge 2018-08-20 14:19:30 -07:00
Sean Coffey
15cef25bb0 8208675: Remove legacy sun.security.key.serial.interop property
Reviewed-by: mullan
2018-08-17 22:20:47 +01:00
Joe Darcy
07ed14c5cf 8209304: Deprecate serialVersionUID fields in interfaces
Reviewed-by: lancea, mullan, rriggs, smarks
2018-08-17 13:37:01 -07:00
Xue-Lei Andrew Fan
611c53c860 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 18:16:47 -07:00
Weijun Wang
33a96c6df9 8209416: Refactoring GetPropertyAction calls in security libs
Reviewed-by: xuelei, rriggs
2018-08-14 22:39:34 +08:00
Weijun Wang
ea95e1ef2e 8201290: keytool importcert fails with CertificateParsingException if unknown certificate algorithms should be imported
Reviewed-by: mullan, xuelei
2018-08-10 17:07:44 +08:00
Joe Darcy
4bac00436d 8209024: Use SuppressWarnings on serialVersionUID fields in interfaces
Reviewed-by: bpb, rriggs, mullan
2018-08-06 14:29:22 -07:00
Sean Coffey
7a791910c3 8208583: Better management of internal KeyStore buffers
Reviewed-by: weijun
2018-08-03 14:14:59 +01:00
Weijun Wang
b9bfd45c73 8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer
Reviewed-by: xuelei
2018-08-01 13:35:08 +08:00
Phil Race
1387c87093 Merge 2018-07-26 10:00:40 -07:00
Phil Race
28e828130d Merge 2018-07-19 10:17:22 -07:00
Jamil Nimeh
1f273bde76 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-18 14:32:46 -07:00
Jesper Wilhelmsson
4fc510cc89 Merge 2018-07-14 02:14:54 +02:00
Xue-Lei Andrew Fan
a98ec3e8bd 8207029: Unable to use custom SSLEngine with default TrustManagerFactory after updating to JDK 11 b21
Reviewed-by: wetmore
2018-07-13 07:08:59 -07:00
Weijun Wang
11e4fac62b 8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error
Reviewed-by: xuelei
2018-07-12 08:44:39 +08:00
Sibabrata Sahoo
99f911cc71 8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
Fixed SSLSessionImpl.getLocalPrincipal() implementation when client side authentication is not enabled.

Reviewed-by: xuelei
2018-07-04 11:49:46 -07:00
Valerie Peng
ecc5979769 8205720: KeyFactory#getKeySpec and translateKey thorws NullPointerException with Invalid key
Updated SunRsaSign provider to check and throw InvalidKeyException for null key algo/format/encoding

Reviewed-by: xuelei
2018-06-30 00:33:05 +00:00
Roger Riggs
4098f2560a 8066709: Make some JDK system properties read only
Reviewed-by: lancea, sundar, bchristi, weijun, mchung, alanb, mullan
2018-06-27 09:36:34 -04:00
Adam Petcher
a7e35cb988 8203228: Branch-free output conversion for X25519 and X448
Make some field arithmetic operations for X25519/X448 more resilient against side-channel attacks

Reviewed-by: ascarpino
2018-06-26 11:14:27 -04:00