278 Commits

Author SHA1 Message Date
Jamil Nimeh
6b7a466f74 8242294: JSSE Client does not throw SSLException when an alert occurs during handshaking
Reviewed-by: xuelei
2020-04-08 00:03:56 -07:00
Weijun Wang
d8539a51ef 8242184: CRL generation error with RSASSA-PSS
Reviewed-by: xuelei
2020-04-08 10:13:12 +08:00
Xue-Lei Andrew Fan
ed00873148 8215711: Missing key_share extension for (EC)DHE key exchange should alert missing_extension
Reviewed-by: ascarpino
2020-04-05 20:17:08 -07:00
Alexey Bakhtin
76d534986b 8241960: The SHA3 message digests impl of SUN provider are not thread safe after cloned
Fix sun.security.provider.SHA3 class to correctly clone its lanes field

Reviewed-by: valeriep
2020-04-03 22:39:00 +00:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)
Reviewed-by: weijun
2020-04-01 18:38:05 -07:00
Xue-Lei Andrew Fan
36af90acc0 8215712: Parsing extension failure may alert decode_error
Reviewed-by: jnimeh
2020-03-22 09:30:16 -07:00
Pavel Rappo
17ff85d4ad 8241014: Miscellaneous typos in documentation comments
Reviewed-by: igerasim, prappo, psandoz, rriggs, weijun
2020-03-20 20:54:56 +00:00
Xue-Lei Andrew Fan
f67868d917 8219989: Retire the com.sun.net.ssl.internal.ssl.Provider name
Remove the provider name in JDK

Reviewed-by: mullan
2020-03-20 09:27:06 -07:00
Xue-Lei Andrew Fan
d243e40f7b 8241039: Retire the deprecated SSLSession.getPeerCertificateChain() method
Reviewed-by: mullan, alanb, dfuchs
2020-03-20 09:15:00 -07:00
Hai-May Chao
0c9f8e472f 8186143: keytool -ext option doesn't accept wildcards for DNS subject alternative names
Reviewed-by: jnimeh, weijun, mullan
2020-03-18 09:23:57 +08:00
Alexey Bakhtin
14e37ba3df 8239798: SSLSocket closes socket both socket endpoints on a SocketTimeoutException
Reviewed-by: xuelei
2020-03-11 19:14:08 +03:00
Xue-Lei Andrew Fan
89448a83d9 8233619: SSLEngine handshake status immediately after the handshake can be NOT_HANDSHAKING rather than FINISHED with TLSv1.3
Reviewed-by: jnimeh
2020-03-03 15:57:01 -08:00
Ravi Reddy
9b12c80e21 8238452: Keytool generates wrong expiration date if validity is set to 2050/01/01
Reviewed-by: pkoppula, weijun, coffeys
2020-02-26 18:06:19 +03:00
Weijun Wang
533649b8ca 8237218: Support NIST Curves verification in java implementation
Reviewed-by: ascarpino
2020-02-22 08:10:21 +08:00
Jamil Nimeh
39db83a9cc 8239094: PKCS#9 ChallengePassword attribute does not allow for the UTF8String type
Reviewed-by: xuelei
2020-02-19 13:36:53 -08:00
Xue-Lei Andrew Fan
4e430ffbb6 8239264: Clearup the legacy ObjectIdentifier constructor from int array
Reviewed-by: jnimeh
2020-02-17 18:52:50 -08:00
Valerie Peng
c103a1bb69 8238448: RSASSA-PSS signature verification fail when using certain odd key sizes
Calculate and set offset for correct verification for such key sizes

Reviewed-by: xuelei
2020-02-12 02:44:45 +00:00
Matthias Baesken
ef41763d32 8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
Reviewed-by: clanger, mullan
2020-02-03 09:39:39 +01:00
Jesper Wilhelmsson
b7cdc097e3 Merge 2020-01-22 21:02:16 +01:00
Leo Jiang
b94b082727 8237465: JDK 14 L10n resource files update - msg drop 10
Reviewed-by: naoto
2020-01-22 22:37:36 +08:00
Mikael Vidstedt
3318314c7c 8237589: Fix copyright header formatting
Reviewed-by: jjg, serb, iris, jwilhelm
2020-01-21 14:23:01 -08:00
Henry Jen
ae81cfa30f Merge 2020-01-15 01:54:35 +00:00
Henry Jen
231d9afe6f Merge 2020-01-09 20:16:21 +00:00
Anthony Scarpino
7ed4930a8e 8236098: AlgorithmConstraints:permits method not throwing IAEx when primitives are empty
Reviewed-by: xuelei
2020-01-08 13:25:03 -08:00
Weijun Wang
e7a07ea2f3 8236470: Deal with ECDSA using ecdsa-with-SHA2 plus hash algorithm as AlgorithmId
Reviewed-by: xuelei
2019-12-25 07:17:25 +08:00
Anthony Scarpino
ca112043f1 8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
Reviewed-by: mullan, xuelei, weijun
2019-12-18 12:10:09 -08:00
Sibabrata Sahoo
fca342f736 8235874: The ordering of Cipher Suites is not maintained provided through jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system property
Corrected Cipher Suites ordering through system properties

Reviewed-by: xuelei
2019-12-16 00:23:50 -08:00
Sibabrata Sahoo
58cce5fbf4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-13 01:43:14 -08:00
Xue-Lei Andrew Fan
c185319515 8235655: Clean the duplicated block in SSLContextImpl
Reviewed-by: coffeys
2019-12-10 09:31:40 -08:00
Xue-Lei Andrew Fan
02cc064144 8234037: Improve Object Identifier Processing
Reviewed-by: weijun, mschoene, ssahoo
2019-11-25 07:24:17 -08:00
Masanori Yano
567465c62c 8216012: Infinite loop in RSA KeyPairGenerator
Check and error out on even RSA public exponents

Reviewed-by: valeriep
2020-01-17 01:05:27 +00:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00
Jesper Wilhelmsson
943b87ddde Merge 2020-01-09 20:21:53 +01:00
Jesper Wilhelmsson
257a1bb854 Merge 2020-01-08 16:03:32 +01:00
Jamil Nimeh
8a1b5ad914 8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
Reviewed-by: xuelei
2020-01-05 21:04:39 -08:00
Jamil Nimeh
c5f884c6d1 8231780: Better TLS messaging support
Reviewed-by: ascarpino, rhalade, mschoene
2019-10-28 18:53:51 -07:00
Sean Mullan
a0f8febb8b 8230318: Better trust store usage
Reviewed-by: weijun, rhalade, ahgross
2019-10-22 17:25:34 -04:00
Weijun Wang
f3815c85a1 8231139: Improved keystore support
Reviewed-by: mullan, ahgross
2019-10-09 17:42:38 +08:00
Xue-Lei Andrew Fan
10b010d0f5 8229728: Implement negotiation parameters
Reviewed-by: jnimeh, ahgross, rhalade
2019-09-10 17:13:48 -07:00
Sean Mullan
6cb8dfa9e3 8227758: More valid PKIX processing
Reviewed-by: xuelei, rhalade, coffeys, mschoene
2019-08-26 13:57:51 -04:00
Jesper Wilhelmsson
e788e6dd46 Merge 2019-12-18 23:46:55 +01:00
Jesper Wilhelmsson
83163dbfe6 Merge 2019-12-16 17:43:20 +01:00
Weijun Wang
1ae2478404 8234697: Generate sun.security.util.math.intpoly classes during build
Reviewed-by: erikj, mullan
2019-12-14 13:50:34 +08:00
Sibabrata Sahoo
94e8d6eca4 8234728: Some security tests should support TLSv1.3
Tests were updated to support TLSv1.3 and cipher suite order

Reviewed-by: xuelei
2019-12-12 22:47:24 -08:00
Xue-Lei Andrew Fan
3ba75a656a 8235311: Tag mismatch may alert bad_record_mac
Reviewed-by: mullan
2019-12-10 07:07:49 -08:00
Rajan Halade
5fc46f3c50 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols
Reviewed-by: mullan, wetmore, xuelei
2019-12-09 21:38:12 -08:00
Xue-Lei Andrew Fan
baebce3d2f 8235448: code cleanup in SSLContextImpl.java
Reviewed-by: jnimeh
2019-12-09 10:56:27 -08:00
Xue-Lei Andrew Fan
96a8b9796d 8235263: Revert TLS 1.3 change that wrapped IOExceptions
Reviewed-by: mullan
2019-12-03 17:15:02 -08:00
Weijun Wang
bc19b64856 8234744: KeyStore.store can write wrong type of file
Reviewed-by: mullan
2019-12-03 14:38:18 +08:00
Xue-Lei Andrew Fan
50714b0fb9 8235183: Remove the "HACK CODE" in comment
Reviewed-by: jnimeh
2019-12-02 10:42:27 -08:00