518 Commits

Author SHA1 Message Date
Phil Race
1387c87093 Merge 2018-07-26 10:00:40 -07:00
Phil Race
28e828130d Merge 2018-07-19 10:17:22 -07:00
Jamil Nimeh
1f273bde76 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-18 14:32:46 -07:00
Jesper Wilhelmsson
4fc510cc89 Merge 2018-07-14 02:14:54 +02:00
Xue-Lei Andrew Fan
a98ec3e8bd 8207029: Unable to use custom SSLEngine with default TrustManagerFactory after updating to JDK 11 b21
Reviewed-by: wetmore
2018-07-13 07:08:59 -07:00
Weijun Wang
11e4fac62b 8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error
Reviewed-by: xuelei
2018-07-12 08:44:39 +08:00
Sibabrata Sahoo
99f911cc71 8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
Fixed SSLSessionImpl.getLocalPrincipal() implementation when client side authentication is not enabled.

Reviewed-by: xuelei
2018-07-04 11:49:46 -07:00
Valerie Peng
ecc5979769 8205720: KeyFactory#getKeySpec and translateKey thorws NullPointerException with Invalid key
Updated SunRsaSign provider to check and throw InvalidKeyException for null key algo/format/encoding

Reviewed-by: xuelei
2018-06-30 00:33:05 +00:00
Roger Riggs
4098f2560a 8066709: Make some JDK system properties read only
Reviewed-by: lancea, sundar, bchristi, weijun, mchung, alanb, mullan
2018-06-27 09:36:34 -04:00
Adam Petcher
a7e35cb988 8203228: Branch-free output conversion for X25519 and X448
Make some field arithmetic operations for X25519/X448 more resilient against side-channel attacks

Reviewed-by: ascarpino
2018-06-26 11:14:27 -04:00
Weijun Wang
60ff77bd97 8201815: Use Mozilla Public Suffix List
Reviewed-by: michaelm, erikj, ihse
2018-06-26 18:55:48 +08:00
Weijun Wang
230268522b 8202299: Java Keystore fails to load PKCS12/PFX certificates created in WindowsServer2016
Reviewed-by: mullan, xuelei
2018-06-26 10:43:50 +08:00
Weijun Wang
3ad65642c8 8202608: CommonSeeder test needs a white-box testing mechanism to replace the default entropy source
Reviewed-by: xuelei
2018-06-26 10:43:43 +08:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Valerie Peng
b0af57a018 8179098: Crypto AES/ECB encryption/decryption performance regression (introduced in jdk9b73)
Do bounds check per encryption/decryption call instead of per block

Reviewed-by: ascarpino, redestad
2018-07-13 02:36:42 +00:00
Weijun Wang
b8d80042d7 8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error
Reviewed-by: xuelei
2018-07-12 08:44:39 +08:00
Weijun Wang
578576f523 8205445: Add RSASSA-PSS Signature support to SunMSCAPI
Reviewed-by: xuelei
2018-06-22 21:42:00 +08:00
Valerie Peng
8e127e5c26 8204152: SignedObject throws NullPointerException for null keys with an initialized Signature object
Check for null and throw InvalidKeyException to maintain same behavior

Reviewed-by: xuelei
2018-06-19 23:33:31 +00:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Adam Petcher
f15ab37909 8181594: Efficient and constant-time modular arithmetic
Field arithmetic library for crypto algorithms like Poly1305 and X25519

Reviewed-by: xuelei
2018-05-08 09:21:51 -04:00
Claes Redestad
0f478d2cfd 8202419: Avoid creating Permission constants early
Reviewed-by: alanb, mullan
2018-04-30 16:27:23 +02:00
Weijun Wang
bde972d645 8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
Reviewed-by: xuelei
2018-07-19 00:14:40 +08:00
Weijun Wang
a825fe0a2d 8207250: setUseClientMode post handshake with the same value as before does not throw IAE
Reviewed-by: xuelei
2018-07-19 00:14:29 +08:00
Adam Petcher
108461949f 8206929: Check session context for TLS 1.3 session resumption
Additional checks to prevent TLS 1.3 sessions from being resumed when they shouldn't

Reviewed-by: xuelei
2018-07-17 13:04:40 -04:00
Ivan Gerasimov
72ac0bfc88 8192789: Avoid using AtomicReference in sun.security.provider.PolicyFile
Reviewed-by: mullan, ahgross
2017-12-07 12:25:09 -08:00
Weijun Wang
cf8a91378d 8189969: Manifest better manifest entries
Reviewed-by: mullan
2017-12-14 08:21:36 +08:00
Sean Mullan
d32a31283c 8191358: Restore TSA certificate expiration check
Reviewed-by: coffeys, rhalade
2017-12-08 09:37:28 -05:00
Claes Redestad
f5a681373f 8152821: Merge jdk.internal.misc.JavaSecurityAccess and jdk.internal.misc.JavaSecurityProtectionDomainAccess shared secrets
Reviewed-by: mullan
2018-04-13 01:04:33 +02:00
Brian Burkhalter
9e3d8fd230 8194746: (fs) Add equivalents of Paths.get to Path interface
Copy Paths.get() methods to Path.get() methods and have former call latter

Reviewed-by: alanb, forax, chegar, psandoz
2018-03-22 12:30:47 -07:00
Weijun Wang
50484af54b 8191139: Remove deprecated javax.security.auth.Policy API
Reviewed-by: mullan
2018-03-08 12:20:26 +08:00
Lana Steuck
845f7823de Merge 2018-02-09 02:23:34 +00:00
Yue Liu
751fa92e41 8196383: JDK 10 L10n resource file update - msgdrop 20
Reviewed-by: naoto
2018-02-06 22:26:13 -08:00
Adam Petcher
683817de43 8194251: Deadlock between UsageTracker and System.getProperty() when using a malformed security policy
Disable localization of error messages produced during policy file parsing

Reviewed-by: mchung, mullan
2018-02-07 09:06:43 -05:00
Lana Steuck
8f528fba93 Merge 2018-01-18 18:58:46 +00:00
Goetz Lindenmaier
22762d1cdc 8189102: All tools should support -?, -h and --help
Reviewed-by: kvn, jjg, weijun, alanb, rfield, ksrini
2018-01-16 08:48:34 +01:00
Weijun Wang
672ecb7266 8195119: Fine-tune output text in keytool
Reviewed-by: mullan
2018-01-17 07:55:20 +08:00
Lana Steuck
aad1a3592c Merge 2018-01-16 22:24:20 +00:00
Li Jiang
cc269bbcc4 8194717: JDK10 L10n resource file update - msgdrop 10
Reviewed-by: joehw
2018-01-14 22:25:53 -08:00
Lana Steuck
c8c8cd7238 Merge 2018-01-04 04:22:28 +00:00
Abhijit Saha
22b4fae438 Merge 2018-01-17 07:09:03 +00:00
Xue-Lei Andrew Fan
921c319b4f 8193683: Increase the number of clones in the CloneableDigest
Reviewed-by: coffeys, wetmore
2017-12-19 16:31:16 +00:00
Xue-Lei Andrew Fan
755fa4beb7 8193683: Increase the number of clones in the CloneableDigest
Reviewed-by: coffeys, wetmore
2017-12-21 05:51:38 +00:00
Alan Bateman
7b054f30b8 8193758: Update copyright headers of files in src tree that are missing Classpath exception
Reviewed-by: mchung, mr, jjg, iris, prr
2017-12-19 10:03:36 +00:00
Weijun Wang
b01627c0e4 8192988: keytool should support -storepasswd for pkcs12 keystores
Reviewed-by: mullan
2017-12-14 20:19:34 +08:00
Xue-Lei Andrew Fan
82bf0799c6 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Co-authored-by: Martin Balao <mbalao@redhat.com>
Reviewed-by: jnimeh, ahgross, rhalade, wetmore
2017-12-08 16:41:30 +00:00
Weijun Wang
67205081ec 8192987: keytool should remember real storetype if it is not provided
Reviewed-by: mullan
2017-12-08 09:40:14 +08:00
Sean Coffey
0c7be1d9e7 8185855: Debug exception stacks should be clearer
Reviewed-by: mullan, ascarpino
2017-12-06 14:33:33 +00:00
Ivan Gerasimov
06331455d2 8187985: Broken certificate number in debug output
Reviewed-by: weijun
2017-12-03 01:47:23 -08:00
Ivan Gerasimov
ac14c02059 8191632: Typos in comments due to duplicating words
Reviewed-by: alanb
2017-11-20 18:46:52 -08:00
Weijun Wang
cf35c06daa 8191137: keytool fails to format resource strings for keys for some languages after JDK-8171319
Reviewed-by: mullan
2017-11-14 21:43:15 +08:00