816 Commits

Author SHA1 Message Date
Valerie Peng
4c0a0ab6bc 8353578: Refactor existing usage of internal HKDF impl to use the KDF API
Co-authored-by: Kevin Driver <kdriver@openjdk.org>
Reviewed-by: djelinski, wetmore, mullan, kdriver, weijun
2025-05-13 22:43:31 +00:00
Ben Perez
10dcdf1b47 8347606: Optimize Java implementation of ML-DSA
Reviewed-by: weijun
2025-05-13 22:31:55 +00:00
Koushik Thirupattur
68a118509a 8310003: Improve logging when default truststore is inaccessible
Reviewed-by: mullan
2025-05-09 19:20:17 +00:00
nibjen
2c1eb339d6 8350830: Values converted incorrectly when reading TLS session tickets
Reviewed-by: djelinski, ascarpino
2025-05-08 09:06:19 +00:00
Koushik Thirupattur
5d17a28c4e 8353001: Remove leftover Security Manager parsing code in sun.security.util.Debug
Reviewed-by: mullan
2025-05-06 18:10:46 +00:00
Weijun Wang
c514f135cc 8356051: Update SignatureUtil.java with the new KnownOIDs
Reviewed-by: rhalade
2025-05-02 00:25:19 +00:00
Weijun Wang
494ef6cb8c 8354305: SHAKE128 and SHAKE256 MessageDigest algorithms
Reviewed-by: valeriep, mullan
2025-05-01 23:34:35 +00:00
Valerie Peng
6536430a3b 8348732: SunJCE and SunPKCS11 have different PBE key encodings
Reviewed-by: weijun, fferrari
2025-05-01 23:08:16 +00:00
Artur Barashev
34807df762 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension
Reviewed-by: mullan
2025-05-01 13:09:14 +00:00
Rajan Halade
1313349a2e 8350498: Remove two Camerfirma root CA certificates
Reviewed-by: mullan
2025-04-30 18:14:10 +00:00
Roger Riggs
2f8448034f 8354053: Remove unused JavaIOFilePermissionAccess
Reviewed-by: liach, weijun
2025-04-28 18:21:46 +00:00
Bradford Wetmore
21b0f5ea15 8355637: SSLSessionImpl's "serialization" list documentation is incorrectly ordered
Reviewed-by: ascarpino
2025-04-26 05:46:05 +00:00
Sean Coffey
1ec64811a3 8350582: Correct the parsing of the ssl value in javax.net.debug
Reviewed-by: wetmore, hchao
2025-04-24 12:01:34 +00:00
Artur Barashev
abb23828f9 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled
Reviewed-by: mullan
2025-04-17 13:45:47 +00:00
Ferenc Rakoczi
465c8e6583 8349721: Add aarch64 intrinsics for ML-KEM
Reviewed-by: adinn
2025-04-16 12:35:24 +00:00
Artur Barashev
ed30fce6df 8347847: Enhance jar file support
Reviewed-by: rhalade, jnibedita, pkumaraswamy, ahgross, hchao, weijun, mullan
2025-04-16 13:05:32 +05:30
Jamil Nimeh
e91b3f0c3d 8337692: Better TLS connection support
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: rhalade, valeriep, pkumaraswamy, mpowers, ahgross, mbalao
2025-04-16 13:05:32 +05:30
Roger Riggs
af5db51306 8353641: Deprecate core library permission classes for removal
Reviewed-by: mullan, iris
2025-04-10 19:19:31 +00:00
Ferenc Rakoczi
e87ff328d5 8351034: Add AVX-512 intrinsics for ML-DSA
Reviewed-by: sviswanathan, lmesnik, vpaprotski, jbhateja
2025-04-09 21:15:45 +00:00
Artur Barashev
dfa79c3730 8340321: Disable SHA-1 in TLS/DTLS 1.2 handshake signatures
Reviewed-by: mullan
2025-04-08 13:02:50 +00:00
Volodymyr Paprotski
885cf0ff8d 8353671: Remove dead code missed in JDK-8350459
Reviewed-by: sviswanathan, mullan
2025-04-07 18:44:04 +00:00
Koushik Thirupattur
0d4d155816 8349890: Option -Djava.security.debug=x509,ava breaks special chars
Reviewed-by: mullan
2025-04-07 17:29:13 +00:00
Koushik Thirupattur
3e96f5cbca 8351366: Remove the java.security.debug=scl option
Reviewed-by: hchao, mullan
2025-03-31 16:54:12 +00:00
Artur Barashev
9c06dcb439 8349583: Add mechanism to disable signature schemes based on their TLS scope
Reviewed-by: mullan, ascarpino
2025-03-31 16:45:40 +00:00
Anthony Scarpino
e4e62789c7 8346129: Simplify EdDSA & XDH curve name usage
Reviewed-by: weijun, abarashev
2025-03-31 15:59:30 +00:00
Volodymyr Paprotski
a269bef04c 8350459: MontgomeryIntegerPolynomialP256 multiply intrinsic with AVX2 on x86_64
Reviewed-by: ascarpino, sviswanathan
2025-03-28 15:20:31 +00:00
Artur Barashev
9a49418138 8345940: Migrate security-related resources from Java classes to properties files
Reviewed-by: jlu, weijun, erikj
2025-03-11 20:07:10 +00:00
Justin Lu
7c9a7840ea 8351223: Update localized resources in keytool and jarsigner
Reviewed-by: weijun
2025-03-06 22:54:24 +00:00
Ferenc Rakoczi
3230894bdd 8348561: Add aarch64 intrinsics for ML-DSA
Reviewed-by: adinn
2025-03-04 14:41:35 +00:00
Mikhail Yankelevich
7734f8ed13 8349664: HEX dump should always use ASCII or ISO_8859_1
Reviewed-by: weijun
2025-02-19 18:56:26 +00:00
konanki sreenath
70a6c0b7ac 8346094: Harden X509CertImpl.getExtensionValue for NPE cases
Reviewed-by: coffeys, weijun
2025-02-19 16:47:54 +00:00
Weijun Wang
aba60a9274 8189441: Define algorithm names for keys derived from KeyAgreement
Reviewed-by: mullan
2025-01-27 18:09:17 +00:00
Jamil Nimeh
f8e81d2339 8347506: Compatible OCSP readtimeout property with OCSP timeout
Reviewed-by: mullan, hchao
2025-01-24 23:06:57 +00:00
Mark Powers
907350e9e8 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs
Reviewed-by: mullan
2025-01-24 23:05:34 +00:00
Weijun Wang
0ee6ba9c4c 8347596: Update HSS/LMS public key encoding
Reviewed-by: mullan
2025-01-14 23:06:45 +00:00
Weijun Wang
fa5ff82eb3 8342062: Reformat keytool and jarsigner output for keys with a named parameter set
Reviewed-by: mullan
2025-01-13 13:43:52 +00:00
Bradford Wetmore
68c6623d38 8345840: Add missing TLS handshake messages to SSLHandshake.java
Reviewed-by: jnimeh
2024-12-23 19:05:07 +00:00
Justin Lu
fd0207d593 8345327: JDK 24 RDP1 L10n resource files update
Reviewed-by: naoto, dnguyen, joehw, almatvee, sgehwolf, jlahoda, prappo, asemenyuk
2024-12-16 21:00:56 +00:00
Archie Cobbs
4b21fb9df9 8343467: Remove unnecessary @SuppressWarnings annotations (security)
Reviewed-by: mullan
2024-12-13 22:40:42 +00:00
Magnus Ihse Bursie
ddf0461788 8345799: Update copyright year to 2024 for core-libs in files where it was missed
Reviewed-by: joehw, jlu, mli, lancea, kevinw
2024-12-11 21:08:22 +00:00
Kevin Driver
4c39e9faa0 8344924: Default CA certificates loaded despite request to use custom keystore
Reviewed-by: ascarpino
2024-12-10 20:49:13 +00:00
Weijun Wang
ca46c3a5ba 8343622: AesDkCrypto.stringToKey should not return null
Reviewed-by: valeriep
2024-12-05 08:36:18 +00:00
Weijun Wang
fb95a53944 8345533: Switch ML-DSA implementation to FIPS 204 final
Reviewed-by: bperez, jnimeh
2024-12-05 01:27:10 +00:00
Ben Perez
f904480a49 8345512: Remove wrapper functions for intrinsics in PQC algorithms
Reviewed-by: weijun
2024-12-04 22:01:10 +00:00
Roger Riggs
fcf185c8b4 8345325: SM cleanup of GetPropertyAction in java.base
Reviewed-by: alanb, lancea, naoto, mchung
2024-12-03 14:59:30 +00:00
Sean Mullan
940aa7c4cf 8344397: Remove Security Manager dependencies from java.security and sun.security packages
Reviewed-by: rriggs, hchao, weijun, alanb
2024-12-02 21:30:53 +00:00
Sean Mullan
30b8bbe255 8345060: Remove Security Manager dependencies from java.security.KeyStore and Identity APIs and implementations
Reviewed-by: hchao, alanb, weijun
2024-12-02 15:23:47 +00:00
Aleksei Efimov
959fa4a1a3 8344299: SM cleanup in javax.naming modules
Reviewed-by: alanb, dfuchs
2024-11-28 17:43:27 +00:00
Sean Mullan
c5de307284 8344992: Remove Security Manager dependencies from java.security.cert API and implementations
Reviewed-by: rriggs, hchao
2024-11-26 18:40:52 +00:00
Per Minborg
fc2da15bce 8344419: Use StaticProperty in some JDK classes
Reviewed-by: alanb, rriggs
2024-11-26 12:07:26 +00:00