77 Commits

Author SHA1 Message Date
Joe Darcy
4bac00436d 8209024: Use SuppressWarnings on serialVersionUID fields in interfaces
Reviewed-by: bpb, rriggs, mullan
2018-08-06 14:29:22 -07:00
Sean Coffey
7a791910c3 8208583: Better management of internal KeyStore buffers
Reviewed-by: weijun
2018-08-03 14:14:59 +01:00
Weijun Wang
b9bfd45c73 8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer
Reviewed-by: xuelei
2018-08-01 13:35:08 +08:00
Phil Race
1387c87093 Merge 2018-07-26 10:00:40 -07:00
Leo Jiang
6c703b8589 8207948: JDK 11 L10n resource file update msg drop 10
Reviewed-by: naoto
2018-07-25 22:48:53 -07:00
Xue-Lei Andrew Fan
d2b2780859 8208166: Still unable to use custom SSLEngine with default TrustManagerFactory after JDK-8207029
Reviewed-by: ascarpino
2018-07-25 17:21:04 -07:00
Jamil Nimeh
8158cca17d 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-25 09:48:31 -07:00
Valerie Peng
df08003471 8206171: Signature#getParameters for RSASSA-PSS throws ProviderException when not initialized
Changed SunRsaSign and SunMSCAPI provider to return null and updated javadoc

Reviewed-by: weijun, mullan
2018-07-23 23:18:19 +00:00
Weijun Wang
32a2f54b64 8207223: SSL Handshake failures are reported with more generic SSLException
Reviewed-by: xuelei
2018-07-21 21:46:42 +08:00
Anthony Scarpino
4e46cc1392 8204196: integer cleanup
Reviewed-by: xuelei
2018-07-20 09:55:15 -07:00
Phil Race
28e828130d Merge 2018-07-19 10:17:22 -07:00
Jamil Nimeh
1f273bde76 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-18 14:32:46 -07:00
Jesper Wilhelmsson
4fc510cc89 Merge 2018-07-14 02:14:54 +02:00
Xue-Lei Andrew Fan
a98ec3e8bd 8207029: Unable to use custom SSLEngine with default TrustManagerFactory after updating to JDK 11 b21
Reviewed-by: wetmore
2018-07-13 07:08:59 -07:00
Weijun Wang
11e4fac62b 8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error
Reviewed-by: xuelei
2018-07-12 08:44:39 +08:00
Sibabrata Sahoo
99f911cc71 8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
Fixed SSLSessionImpl.getLocalPrincipal() implementation when client side authentication is not enabled.

Reviewed-by: xuelei
2018-07-04 11:49:46 -07:00
Valerie Peng
ecc5979769 8205720: KeyFactory#getKeySpec and translateKey thorws NullPointerException with Invalid key
Updated SunRsaSign provider to check and throw InvalidKeyException for null key algo/format/encoding

Reviewed-by: xuelei
2018-06-30 00:33:05 +00:00
Roger Riggs
4098f2560a 8066709: Make some JDK system properties read only
Reviewed-by: lancea, sundar, bchristi, weijun, mchung, alanb, mullan
2018-06-27 09:36:34 -04:00
Adam Petcher
a7e35cb988 8203228: Branch-free output conversion for X25519 and X448
Make some field arithmetic operations for X25519/X448 more resilient against side-channel attacks

Reviewed-by: ascarpino
2018-06-26 11:14:27 -04:00
Weijun Wang
60ff77bd97 8201815: Use Mozilla Public Suffix List
Reviewed-by: michaelm, erikj, ihse
2018-06-26 18:55:48 +08:00
Weijun Wang
230268522b 8202299: Java Keystore fails to load PKCS12/PFX certificates created in WindowsServer2016
Reviewed-by: mullan, xuelei
2018-06-26 10:43:50 +08:00
Weijun Wang
3ad65642c8 8202608: CommonSeeder test needs a white-box testing mechanism to replace the default entropy source
Reviewed-by: xuelei
2018-06-26 10:43:43 +08:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Valerie Peng
b0af57a018 8179098: Crypto AES/ECB encryption/decryption performance regression (introduced in jdk9b73)
Do bounds check per encryption/decryption call instead of per block

Reviewed-by: ascarpino, redestad
2018-07-13 02:36:42 +00:00
Weijun Wang
b8d80042d7 8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error
Reviewed-by: xuelei
2018-07-12 08:44:39 +08:00
Weijun Wang
578576f523 8205445: Add RSASSA-PSS Signature support to SunMSCAPI
Reviewed-by: xuelei
2018-06-22 21:42:00 +08:00
Valerie Peng
8e127e5c26 8204152: SignedObject throws NullPointerException for null keys with an initialized Signature object
Check for null and throw InvalidKeyException to maintain same behavior

Reviewed-by: xuelei
2018-06-19 23:33:31 +00:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Adam Petcher
f15ab37909 8181594: Efficient and constant-time modular arithmetic
Field arithmetic library for crypto algorithms like Poly1305 and X25519

Reviewed-by: xuelei
2018-05-08 09:21:51 -04:00
Claes Redestad
0f478d2cfd 8202419: Avoid creating Permission constants early
Reviewed-by: alanb, mullan
2018-04-30 16:27:23 +02:00
Weijun Wang
bde972d645 8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
Reviewed-by: xuelei
2018-07-19 00:14:40 +08:00
Weijun Wang
a825fe0a2d 8207250: setUseClientMode post handshake with the same value as before does not throw IAE
Reviewed-by: xuelei
2018-07-19 00:14:29 +08:00
Adam Petcher
108461949f 8206929: Check session context for TLS 1.3 session resumption
Additional checks to prevent TLS 1.3 sessions from being resumed when they shouldn't

Reviewed-by: xuelei
2018-07-17 13:04:40 -04:00
Ivan Gerasimov
72ac0bfc88 8192789: Avoid using AtomicReference in sun.security.provider.PolicyFile
Reviewed-by: mullan, ahgross
2017-12-07 12:25:09 -08:00
Weijun Wang
cf8a91378d 8189969: Manifest better manifest entries
Reviewed-by: mullan
2017-12-14 08:21:36 +08:00
Sean Mullan
d32a31283c 8191358: Restore TSA certificate expiration check
Reviewed-by: coffeys, rhalade
2017-12-08 09:37:28 -05:00
Claes Redestad
f5a681373f 8152821: Merge jdk.internal.misc.JavaSecurityAccess and jdk.internal.misc.JavaSecurityProtectionDomainAccess shared secrets
Reviewed-by: mullan
2018-04-13 01:04:33 +02:00
Brian Burkhalter
9e3d8fd230 8194746: (fs) Add equivalents of Paths.get to Path interface
Copy Paths.get() methods to Path.get() methods and have former call latter

Reviewed-by: alanb, forax, chegar, psandoz
2018-03-22 12:30:47 -07:00
Weijun Wang
50484af54b 8191139: Remove deprecated javax.security.auth.Policy API
Reviewed-by: mullan
2018-03-08 12:20:26 +08:00
Lana Steuck
845f7823de Merge 2018-02-09 02:23:34 +00:00
Yue Liu
751fa92e41 8196383: JDK 10 L10n resource file update - msgdrop 20
Reviewed-by: naoto
2018-02-06 22:26:13 -08:00
Adam Petcher
683817de43 8194251: Deadlock between UsageTracker and System.getProperty() when using a malformed security policy
Disable localization of error messages produced during policy file parsing

Reviewed-by: mchung, mullan
2018-02-07 09:06:43 -05:00
Lana Steuck
8f528fba93 Merge 2018-01-18 18:58:46 +00:00
Goetz Lindenmaier
22762d1cdc 8189102: All tools should support -?, -h and --help
Reviewed-by: kvn, jjg, weijun, alanb, rfield, ksrini
2018-01-16 08:48:34 +01:00
Weijun Wang
672ecb7266 8195119: Fine-tune output text in keytool
Reviewed-by: mullan
2018-01-17 07:55:20 +08:00
Lana Steuck
aad1a3592c Merge 2018-01-16 22:24:20 +00:00
Li Jiang
cc269bbcc4 8194717: JDK10 L10n resource file update - msgdrop 10
Reviewed-by: joehw
2018-01-14 22:25:53 -08:00
Lana Steuck
c8c8cd7238 Merge 2018-01-04 04:22:28 +00:00
Abhijit Saha
22b4fae438 Merge 2018-01-17 07:09:03 +00:00
Xue-Lei Andrew Fan
921c319b4f 8193683: Increase the number of clones in the CloneableDigest
Reviewed-by: coffeys, wetmore
2017-12-19 16:31:16 +00:00