291 Commits

Author SHA1 Message Date
Valerie Peng
4c0a0ab6bc 8353578: Refactor existing usage of internal HKDF impl to use the KDF API
Co-authored-by: Kevin Driver <kdriver@openjdk.org>
Reviewed-by: djelinski, wetmore, mullan, kdriver, weijun
2025-05-13 22:43:31 +00:00
Koushik Thirupattur
68a118509a 8310003: Improve logging when default truststore is inaccessible
Reviewed-by: mullan
2025-05-09 19:20:17 +00:00
nibjen
2c1eb339d6 8350830: Values converted incorrectly when reading TLS session tickets
Reviewed-by: djelinski, ascarpino
2025-05-08 09:06:19 +00:00
Artur Barashev
34807df762 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension
Reviewed-by: mullan
2025-05-01 13:09:14 +00:00
Bradford Wetmore
21b0f5ea15 8355637: SSLSessionImpl's "serialization" list documentation is incorrectly ordered
Reviewed-by: ascarpino
2025-04-26 05:46:05 +00:00
Sean Coffey
1ec64811a3 8350582: Correct the parsing of the ssl value in javax.net.debug
Reviewed-by: wetmore, hchao
2025-04-24 12:01:34 +00:00
Artur Barashev
abb23828f9 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled
Reviewed-by: mullan
2025-04-17 13:45:47 +00:00
Artur Barashev
dfa79c3730 8340321: Disable SHA-1 in TLS/DTLS 1.2 handshake signatures
Reviewed-by: mullan
2025-04-08 13:02:50 +00:00
Artur Barashev
9c06dcb439 8349583: Add mechanism to disable signature schemes based on their TLS scope
Reviewed-by: mullan, ascarpino
2025-03-31 16:45:40 +00:00
Bradford Wetmore
68c6623d38 8345840: Add missing TLS handshake messages to SSLHandshake.java
Reviewed-by: jnimeh
2024-12-23 19:05:07 +00:00
Magnus Ihse Bursie
ddf0461788 8345799: Update copyright year to 2024 for core-libs in files where it was missed
Reviewed-by: joehw, jlu, mli, lancea, kevinw
2024-12-11 21:08:22 +00:00
Kevin Driver
4c39e9faa0 8344924: Default CA certificates loaded despite request to use custom keystore
Reviewed-by: ascarpino
2024-12-10 20:49:13 +00:00
Sean Mullan
ddc8a9d5da 8344366: Remove Security Manager dependencies from javax.net.ssl and sun.security.ssl packages
Reviewed-by: coffeys, ascarpino, hchao
2024-11-25 13:10:59 +00:00
Patricio Chilano Mateo
78b80150e0 8338383: Implement JEP 491: Synchronize Virtual Threads without Pinning
Co-authored-by: Patricio Chilano Mateo <pchilanomate@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Andrew Haley <aph@openjdk.org>
Co-authored-by: Fei Yang <fyang@openjdk.org>
Co-authored-by: Coleen Phillimore <coleenp@openjdk.org>
Co-authored-by: Richard Reingruber <rrich@openjdk.org>
Co-authored-by: Martin Doerr <mdoerr@openjdk.org>
Reviewed-by: aboldtch, dholmes, coleenp, fbredberg, dlong, sspitsyn
2024-11-12 15:23:48 +00:00
Artur Barashev
8b4749713c 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server
Reviewed-by: wetmore, djelinski, xuelei
2024-11-04 18:46:38 +00:00
Hai-May Chao
dadcee1b89 8307383: Enhance DTLS connections
Co-authored-by: Jamil Nimeh <jnimeh@openjdk.org>
Reviewed-by: rhalade, mschoene, ascarpino
2024-10-15 17:04:27 +05:30
Jamil Nimeh
b6e72ff971 8339403: sun.security.ssl.StatusResponseManager.get swallows interrupt status
Reviewed-by: valeriep
2024-10-03 17:16:31 +00:00
Anthony Scarpino
0c2b175898 8328608: Multiple NewSessionTicket support for TLS
Reviewed-by: djelinski
2024-08-28 17:24:33 +00:00
Hai-May Chao
fd741a88e8 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
Reviewed-by: wetmore
2024-07-21 17:05:46 +00:00
Prajwal Kumaraswamy
1b9270ac8a 8328723: IP Address error when client enables HTTPS endpoint check on server socket
Reviewed-by: wetmore, djelinski
2024-07-18 22:42:34 +00:00
Anthony Scarpino
07bc523df8 8334670: SSLSocketOutputRecord buffer miscalculation
Reviewed-by: djelinski, ssahoo
2024-06-26 22:28:33 +00:00
nibjen
e681b4e9b3 8332524: Instead of printing "TLSv1.3," it is showing "TLS13"
Reviewed-by: mullan
2024-06-18 13:28:37 +00:00
Prasadrao Koppula
d44aaa37f9 8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message
Reviewed-by: djelinski, coffeys, jjiang, ascarpino
2024-03-22 07:02:37 +00:00
John Jiang
9059727df1 8327182: Move serverAlias into the loop
Reviewed-by: gli, mullan
2024-03-19 02:03:13 +00:00
Prajwal Kumaraswamy
bdd1aebea3 8312383: Log X509ExtendedKeyManager implementation class name in TLS/SSL connection
Reviewed-by: coffeys
2024-03-08 09:04:16 +00:00
Anthony Scarpino
f62b5789ad 8311644: Server should not send bad_certificate alert when the client does not send any certificates
Reviewed-by: djelinski, jjiang, ssahoo
2024-02-26 16:49:01 +00:00
Christoph Langer
c2d9fa26ce 8326000: Remove obsolete comments for class sun.security.ssl.SunJSSE
Reviewed-by: mbaesken, ascarpino
2024-02-18 06:58:22 +00:00
John Jiang
fe78c0f191 8325022: Incorrect error message on client authentication
Reviewed-by: jnimeh, hchao, djelinski
2024-02-01 02:35:34 +00:00
Ben Perez
c328f9589d 8296787: Unify debug printing format of X.509 cert serial numbers
Reviewed-by: mullan, coffeys
2023-12-14 17:57:36 +00:00
Hai-May Chao
a95062b39a 8319670: Improve comments describing system properties for TLS server and client for max chain length
Reviewed-by: mullan
2023-11-09 20:21:15 +00:00
Hai-May Chao
0064cf90ff 8311596: Add separate system properties for TLS server and client for maximum chain length
Reviewed-by: jnimeh, weijun, mullan
2023-10-31 15:22:18 +00:00
Jaikiran Pai
0259da9283 8301686: TLS 1.3 handshake fails if server_name doesn't match resuming session
Reviewed-by: djelinski, wetmore
2023-09-29 05:00:02 +00:00
Daniel Jeliński
fee9d3362c 8293176: SSLEngine handshaker does not send an alert after a bad parameters
Reviewed-by: mdonovan, jnimeh
2023-09-27 07:33:52 +00:00
John Jiang
2264667bba 8315422: getSoTimeout() would be in try block in SSLSocketImpl
Reviewed-by: jnimeh
2023-08-31 22:26:48 +00:00
Xue-Lei Andrew Fan
79be8d9383 8312259: StatusResponseManager unused code clean up
Reviewed-by: mpowers, jnimeh
2023-08-10 17:15:56 +00:00
Pavel Rappo
19ae62ae2c 8311170: Simplify and modernize equals and hashCode in security area
Reviewed-by: djelinski, rriggs, valeriep
2023-08-09 12:34:40 +00:00
Matthew Donovan
afcf8e4751 8290005: com/sun/jndi/ldap/LdapCBPropertiesTest.java failling with NullPointerException
Reviewed-by: jnimeh, xuelei
2023-07-17 11:16:19 +00:00
Kevin Driver
5667afc362 8295068: SSLEngine throws NPE parsing CertificateRequests
Reviewed-by: xuelei
2023-07-07 16:55:26 +00:00
Jaikiran Pai
db133dbc02 8310106: sun.security.ssl.SSLHandshake.getHandshakeProducer() incorrectly checks handshakeConsumers
Reviewed-by: wetmore, xuelei
2023-06-16 05:38:10 +00:00
Kevin Driver
80edd5c298 8294985: SSLEngine throws IAE during parsing of X500Principal
Reviewed-by: wetmore, xuelei, mullan
2023-06-09 23:31:12 +00:00
Weijun Wang
6b90b0519e 8297878: KEM: Implementation
Reviewed-by: ascarpino, mullan
2023-05-30 16:29:19 +00:00
Kevin Driver
197d0cc603 8294983: SSLEngine throws ClassCastException during handshake
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Reviewed-by: wetmore, xuelei
2023-05-04 19:25:01 +00:00
Jamil Nimeh
14aad787a8 8294474: Better AES support
Reviewed-by: ahgross, ascarpino
2023-04-18 23:21:20 +00:00
Matthew Donovan
39398075b7 8182621: JSSE should reject empty TLS plaintexts
Reviewed-by: xuelei
2023-04-11 04:21:17 +00:00
Sean Mullan
26b111d714 8301700: Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
Reviewed-by: xuelei
2023-02-15 13:25:50 +00:00
Jesper Wilhelmsson
fc9f8baf56 Merge 2023-01-18 23:29:12 +00:00
Valerie Peng
0f925fefdf 8295723: security/infra/wycheproof/RunWycheproof.java fails with Assertion Error
Reviewed-by: mschoene, ascarpino, coffeys, rhalade, weijun
2023-01-17 20:58:59 +00:00
Valerie Peng
6c5aefe60c 8293554: Enhanced DH Key Exchanges
Reviewed-by: rhalade, mschoene, ascarpino, weijun
2023-01-17 20:58:59 +00:00
Jamil Nimeh
2e8073e4f9 8287411: Enhance DTLS Performance
Reviewed-by: rhalade, ahgross, weijun, ascarpino
2023-01-17 20:58:58 +00:00
Volker Simonis
debe5879aa 8298381: Improve handling of session tickets for multiple SSLContexts
Reviewed-by: xuelei, ascarpino, serb
2023-01-10 11:49:36 +00:00