Jamil Nimeh
|
740e70ba17
|
8232581: Improve TLS verification
Reviewed-by: xuelei, rhalade, mschoene
|
2019-10-30 13:15:21 -07:00 |
|
Jamil Nimeh
|
c5f884c6d1
|
8231780: Better TLS messaging support
Reviewed-by: ascarpino, rhalade, mschoene
|
2019-10-28 18:53:51 -07:00 |
|
Xue-Lei Andrew Fan
|
e6304dcaad
|
8232424: More constrained algorithms
Reviewed-by: jnimeh, rhalade, ahgross
|
2019-10-28 10:43:58 -07:00 |
|
Xue-Lei Andrew Fan
|
123febeb98
|
8229733: TLS message handling improvements
Reviewed-by: jnimeh, rhalade, ahgross
|
2019-10-20 13:42:44 -07:00 |
|
Xue-Lei Andrew Fan
|
10b010d0f5
|
8229728: Implement negotiation parameters
Reviewed-by: jnimeh, ahgross, rhalade
|
2019-09-10 17:13:48 -07:00 |
|
Xue-Lei Andrew Fan
|
3ba75a656a
|
8235311: Tag mismatch may alert bad_record_mac
Reviewed-by: mullan
|
2019-12-10 07:07:49 -08:00 |
|
Rajan Halade
|
5fc46f3c50
|
8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
|
2019-12-09 21:38:12 -08:00 |
|
Xue-Lei Andrew Fan
|
baebce3d2f
|
8235448: code cleanup in SSLContextImpl.java
Reviewed-by: jnimeh
|
2019-12-09 10:56:27 -08:00 |
|
Xue-Lei Andrew Fan
|
96a8b9796d
|
8235263: Revert TLS 1.3 change that wrapped IOExceptions
Reviewed-by: mullan
|
2019-12-03 17:15:02 -08:00 |
|
Xue-Lei Andrew Fan
|
50714b0fb9
|
8235183: Remove the "HACK CODE" in comment
Reviewed-by: jnimeh
|
2019-12-02 10:42:27 -08:00 |
|
Xue-Lei Andrew Fan
|
5161ab9493
|
8233954: UnsatisfiedLinkError or NoSuchAlgorithmException after removing sunec.dll
Reviewed-by: ascarpino
|
2019-11-21 18:42:33 -08:00 |
|
Ivan Gerasimov
|
8e859259bc
|
8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
|
2019-11-12 01:36:17 -08:00 |
|
Xue-Lei Andrew Fan
|
12beed6ec9
|
8233621: Mismatch in jsse.enableMFLNExtension property name
Reviewed-by: mullan
|
2019-11-08 18:35:33 -08:00 |
|
Xue-Lei Andrew Fan
|
b7f557e5c7
|
8223940: Private key not supported by chosen signature algorithm
Reviewed-by: valeriep
|
2019-11-06 09:45:04 -08:00 |
|
Anthony Scarpino
|
0e9916f25b
|
8228825: Enhance ECDSA operations
Reviewed-by: mullan
|
2019-10-04 13:44:11 -07:00 |
|
Joe Darcy
|
6d4ef5aaf3
|
8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
|
2019-08-29 10:52:21 -07:00 |
|
Xue-Lei Andrew Fan
|
c299c4fd46
|
8228757: Fail fast if the handshake type is unknown
Reviewed-by: jnimeh
|
2019-08-19 12:56:48 -07:00 |
|
Xue-Lei Andrew Fan
|
316140ff92
|
8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
|
2019-08-12 21:36:29 -07:00 |
|
Anthony Scarpino
|
81db7083a7
|
8228396: Re-enable Stateless Resumption On by default for merge to mainline
Reviewed-by: jnimeh
|
2019-07-18 13:58:34 -07:00 |
|
Anthony Scarpino
|
200254b479
|
8226338: Updates to Stateless Resumption
Reviewed-by: xuelei, jnimeh
|
2019-07-17 14:37:50 -07:00 |
|
Anthony Scarpino
|
bc7a8842a3
|
8227551: Session Resumption without Server-Side State off by default
Reviewed-by: xuelei, jnimeh, jjiang
|
2019-07-17 12:31:21 -07:00 |
|
Jamil Nimeh
|
86be0cd272
|
8222678: Improve TLS negotiation
Reviewed-by: mullan, rhalade, mschoene
|
2019-05-02 17:43:26 -07:00 |
|
Xue-Lei Andrew Fan
|
e06d193456
|
8218863: Better endpoint checks
Reviewed-by: ahgross, jnimeh, mullan, rhalade
|
2019-02-27 13:58:04 -08:00 |
|
Xue-Lei Andrew Fan
|
dbf62785ef
|
8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
Reviewed-by: ascarpino
|
2019-06-19 21:49:33 -07:00 |
|
Xue-Lei Andrew Fan
|
a4277e56c8
|
8224829: AsyncSSLSocketClose.java has timing issue
Reviewed-by: jnimeh, dfuchs
|
2019-06-14 12:19:14 -07:00 |
|
Bradford Wetmore
|
118fd65d44
|
8171279: Support X25519 and X448 in TLS
Reviewed-by: xuelei, mullan
|
2019-06-12 18:58:00 -07:00 |
|
Anthony Scarpino
|
94e1d7530f
|
8211018: Session Resumption without Server-Side State
Reviewed-by: xuelei, jnimeh, jjiang
|
2019-06-11 16:31:37 -07:00 |
|
Martin Balao
|
ebf8e1c0ac
|
8223482: Unsupported ciphersuites may be offered by a TLS client
Reviewed-by: xuelei
|
2019-05-28 19:01:38 -03:00 |
|
Xue-Lei Andrew Fan
|
7aec6727ac
|
8221253: TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1 bytes
Reviewed-by: jnimeh
|
2019-05-10 12:33:40 -07:00 |
|
Xue-Lei Andrew Fan
|
62109f5906
|
8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
Reviewed-by: alanb, dfuchs
|
2019-05-06 08:54:19 -07:00 |
|
Xue-Lei Andrew Fan
|
eb59ebb177
|
8216326: SSLSocket stream close() does not close the associated socket
Reviewed-by: jnimeh
|
2019-04-16 16:59:09 -07:00 |
|
Valerie Peng
|
3b6b6b3cb3
|
8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange
Add internal Signature init methods to select provider based on both key and parameter
Reviewed-by: xuelei
|
2019-04-10 02:35:18 +00:00 |
|
Xue-Lei Andrew Fan
|
8263b618ba
|
8221882: Use fiber-friendly java.util.concurrent.locks in JSSE
Reviewed-by: alanb, dfuchs
|
2019-04-05 11:28:23 -07:00 |
|
Xue-Lei Andrew Fan
|
d812742d68
|
8163326: Update the default enabled cipher suites preference
Reviewed-by: mullan
|
2019-04-04 14:19:29 -07:00 |
|
Xue-Lei Andrew Fan
|
661b5f1534
|
8217610: TLSv1.3 fail with ClassException when EC keys are stored in PKCS11
Reviewed-by: valeriep
|
2019-04-03 16:23:22 -07:00 |
|
Xue-Lei Andrew Fan
|
2eb8492163
|
8168261: Use server cipher suites preference by default
Reviewed-by: mullan
|
2019-04-01 16:50:17 -07:00 |
|
Valerie Peng
|
e90036145a
|
8220016: Clean up redundant RSA services in the SunJSSE provider
Removed duplicated RSA signature/KF/KPG support in SunJSSE
Reviewed-by: xuelei
|
2019-03-29 00:39:49 +00:00 |
|
Xue-Lei Andrew Fan
|
28adfb6d0d
|
8218889: Improperly use of the Optional API
Reviewed-by: jnimeh, wetmore
|
2019-03-22 13:47:37 -07:00 |
|
Xue-Lei Andrew Fan
|
901e797c0c
|
8221270: Duplicated synchronized keywords in SSLSocketImpl
Reviewed-by: mullan
|
2019-03-21 13:32:08 -07:00 |
|
Xue-Lei Andrew Fan
|
42cb9bf51a
|
8160247: Mark deprecated javax.security.cert APIs with forRemoval=true
Reviewed-by: weijun
|
2019-03-13 07:14:50 -07:00 |
|
Xue-Lei Andrew Fan
|
4332a3dc56
|
8219990: Backout JDK-8219658
Reviewed-by: dfuchs
|
2019-03-01 09:42:04 -08:00 |
|
Xue-Lei Andrew Fan
|
25f0d60a58
|
8215430: Remove the internal package com.sun.net.ssl
Reviewed-by: chegar, mullan, wetmore
|
2019-03-01 08:35:14 -08:00 |
|
Xue-Lei Andrew Fan
|
8f84ae5684
|
8219658: Deadlock in sun.security.ssl.SSLSocketImpl
Reviewed-by: jnimeh
|
2019-02-28 10:04:27 -08:00 |
|
John Jiang
|
e4fd3054fc
|
8215524: Finished message validation failure should be decrypt_error alert
Reviewed-by: xuelei
|
2019-02-26 07:26:29 +08:00 |
|
Xue-Lei Andrew Fan
|
e6f6863cbc
|
8168069: X509TrustManagerImpl causes ClassLoader leaks with unparseable extensions
Reviewed-by: mullan
|
2019-02-20 18:46:30 -08:00 |
|
Xue-Lei Andrew Fan
|
1d7db01371
|
8219389: Delegated task created by SSLEngine throws BufferUnderflowException
Reviewed-by: ascarpino
|
2019-02-20 10:20:48 -08:00 |
|
Xue-Lei Andrew Fan
|
2ca0a6689e
|
4919790: Errors in alert ssl message does not reflect the actual certificate status
Reviewed-by: mullan
|
2019-02-14 14:19:29 -08:00 |
|
Anthony Scarpino
|
5a97e73e5a
|
8215790: Delegated task created by SSLEngine throws java.nio.BufferUnderflowException
Reviewed-by: jnimeh
|
2019-02-12 14:08:07 -08:00 |
|
Xue-Lei Andrew Fan
|
fca0af0487
|
8217835: Remove the experimental SunJSSE FIPS compliant mode
Reviewed-by: mullan
|
2019-02-12 13:36:15 -08:00 |
|
Xue-Lei Andrew Fan
|
9c16dc97a0
|
8218580: endpoint identification algorithm should be case-insensitive
Reviewed-by: jnimeh
|
2019-02-08 10:03:07 -08:00 |
|