24 Commits

Author SHA1 Message Date
Artur Barashev
abb23828f9 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled
Reviewed-by: mullan
2025-04-17 13:45:47 +00:00
Artur Barashev
dfa79c3730 8340321: Disable SHA-1 in TLS/DTLS 1.2 handshake signatures
Reviewed-by: mullan
2025-04-08 13:02:50 +00:00
Artur Barashev
9c06dcb439 8349583: Add mechanism to disable signature schemes based on their TLS scope
Reviewed-by: mullan, ascarpino
2025-03-31 16:45:40 +00:00
Xue-Lei Andrew Fan
5d4c71c8bd 8281236: (D)TLS key exchange named groups
Reviewed-by: mullan
2022-12-07 20:16:45 +00:00
Weijun Wang
19017358b1 8288209: SSL debug message wrong about unsupported authentication scheme
Reviewed-by: djelinski, jnimeh
2022-06-21 14:33:03 +00:00
Xue-Lei Andrew Fan
6d8d156c97 8280494: (D)TLS signature schemes
Reviewed-by: mullan
2022-03-09 16:11:07 +00:00
Jamil Nimeh
a30fb4fc68 8255867: SignatureScheme JSSE property does not preserve ordering in handshake messages
Reviewed-by: xuelei
2021-02-22 22:18:11 +00:00
Xue-Lei Andrew Fan
4d3d59912d 8259223: Simplify boolean expression in the SunJSSE provider
Reviewed-by: mullan
2021-01-05 19:32:46 +00:00
Jamil Nimeh
d80ae05f61 8166596: TLS support for the EdDSA signature algorithm
Reviewed-by: xuelei
2020-12-03 06:12:07 +00:00
Anthony Scarpino
ee452946fc 8245686: Ed25519 and Ed448 present in handshake messages
Reviewed-by: jnimeh, xuelei, wetmore
2020-06-09 18:27:59 -07:00
Xue-Lei Andrew Fan
72446bb0dc 8242141: New System Properties to configure the TLS signature schemes
Reviewed-by: ascarpino, jnimeh, mullan
2020-04-22 10:51:16 -07:00
Xue-Lei Andrew Fan
50714b0fb9 8235183: Remove the "HACK CODE" in comment
Reviewed-by: jnimeh
2019-12-02 10:42:27 -08:00
Xue-Lei Andrew Fan
5161ab9493 8233954: UnsatisfiedLinkError or NoSuchAlgorithmException after removing sunec.dll
Reviewed-by: ascarpino
2019-11-21 18:42:33 -08:00
Xue-Lei Andrew Fan
b7f557e5c7 8223940: Private key not supported by chosen signature algorithm
Reviewed-by: valeriep
2019-11-06 09:45:04 -08:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
2019-08-12 21:36:29 -07:00
Xue-Lei Andrew Fan
dbf62785ef 8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
Reviewed-by: ascarpino
2019-06-19 21:49:33 -07:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS
Reviewed-by: xuelei, mullan
2019-06-12 18:58:00 -07:00
Valerie Peng
3b6b6b3cb3 8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange
Add internal Signature init methods to select provider based on both key and parameter

Reviewed-by: xuelei
2019-04-10 02:35:18 +00:00
Xue-Lei Andrew Fan
661b5f1534 8217610: TLSv1.3 fail with ClassException when EC keys are stored in PKCS11
Reviewed-by: valeriep
2019-04-03 16:23:22 -07:00
Xue-Lei Andrew Fan
fca0af0487 8217835: Remove the experimental SunJSSE FIPS compliant mode
Reviewed-by: mullan
2019-02-12 13:36:15 -08:00
Xue-Lei Andrew Fan
413d5e8c61 8212738: Incorrectly named signature scheme ecdsa_secp512r1_sha512
Reviewed-by: ascarpino
2018-10-30 19:47:16 -07:00
Jaikiran Pai
21341a37af 8212752: Typo in SSL log message related to inactive/disabled signature scheme
Reviewed-by: coffeys
2018-10-22 10:47:28 +01:00
Bradford Wetmore
5b511a4a78 8207317: SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy
Reviewed-by: xuelei
2018-08-21 11:30:48 -07:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00