215 Commits

Author SHA1 Message Date
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
2019-08-29 10:52:21 -07:00
Ivan Gerasimov
3ed845784d 8226831: Use Objects.equals() when appropriate
Reviewed-by: rriggs, bpb
2019-08-27 14:44:21 -07:00
Jamil Nimeh
d096e033d0 8225436: Stapled OCSPResponses should be added to PKIXRevocationChecker irrespective of revocationEnabled flag
Reviewed-by: mullan
2019-08-22 14:09:36 -07:00
Xue-Lei Andrew Fan
c299c4fd46 8228757: Fail fast if the handshake type is unknown
Reviewed-by: jnimeh
2019-08-19 12:56:48 -07:00
Claes Redestad
2c245bd2b9 8229773: Resolve permissions for code source URLs lazily
Reviewed-by: alanb, mullan, rriggs, dfuchs
2019-08-19 06:13:52 +02:00
Valerie Peng
effe3eb806 8228613: java.security.Provider#getServices order is no longer deterministic
Changed to use SunEntries.DEF_SECURE_RANDOM_ALGO instead of relying on ordering of SecureRandom services

Reviewed-by: weijun
2019-08-14 00:57:15 +00:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
2019-08-12 21:36:29 -07:00
Mikael Vidstedt
895db11053 Merge 2019-07-29 09:59:04 -07:00
Leo Jiang
4b791747ef 8228623: Update copyright year to 2019 for several java properties file
Reviewed-by: naoto
2019-07-26 11:47:50 +08:00
Anthony Scarpino
81db7083a7 8228396: Re-enable Stateless Resumption On by default for merge to mainline
Reviewed-by: jnimeh
2019-07-18 13:58:34 -07:00
Mikael Vidstedt
f73a94a772 Merge 2019-07-23 11:17:59 -07:00
Mikael Vidstedt
f08a9de3b2 Merge 2019-07-17 04:33:37 -07:00
Mikael Vidstedt
cfcd0223a9 Merge 2019-07-12 02:50:43 -07:00
Valerie Peng
175faeeadf 8225745: NoSuchAlgorithmException exception for SHA256withECDSA with RSASSA-PSS support
Fixed SignatureUtil and ECDSA signature impl to handle EC parameters

Reviewed-by: weijun
2019-07-11 20:11:47 +00:00
Leo Jiang
8c3e30202b 8227009: JDK 13 L10n resource files update - msgdrop 10
Reviewed-by: naoto
2019-07-10 01:19:18 -07:00
Mikael Vidstedt
e9d003926b Merge 2019-07-10 07:27:58 -07:00
Philipp Kunz
b6d1b1e085 8217375: jarsigner breaks old signature with long lines in manifest
Reviewed-by: jjiang, weijun
2019-07-18 08:53:06 +08:00
Anthony Scarpino
200254b479 8226338: Updates to Stateless Resumption
Reviewed-by: xuelei, jnimeh
2019-07-17 14:37:50 -07:00
Anthony Scarpino
bc7a8842a3 8227551: Session Resumption without Server-Side State off by default
Reviewed-by: xuelei, jnimeh, jjiang
2019-07-17 12:31:21 -07:00
Sean Mullan
a7a94701fe 8226307: Curve names should be case-insensitive
Reviewed-by: igerasim, jnimeh, wetmore
2019-06-21 08:38:26 -04:00
Xue-Lei Andrew Fan
dbf62785ef 8225766: Curve in certificate should not affect signature scheme when using TLSv1.3
Reviewed-by: ascarpino
2019-06-19 21:49:33 -07:00
Weijun Wang
c12cf04011 8225392: Comparison builds are failing due to cacerts file
Reviewed-by: erikj, martin, mullan
2019-06-15 14:39:04 +08:00
Xue-Lei Andrew Fan
a4277e56c8 8224829: AsyncSSLSocketClose.java has timing issue
Reviewed-by: jnimeh, dfuchs
2019-06-14 12:19:14 -07:00
Bradford Wetmore
118fd65d44 8171279: Support X25519 and X448 in TLS
Reviewed-by: xuelei, mullan
2019-06-12 18:58:00 -07:00
Anthony Scarpino
94e1d7530f 8211018: Session Resumption without Server-Side State
Reviewed-by: xuelei, jnimeh, jjiang
2019-06-11 16:31:37 -07:00
Valerie Peng
8813b93095 8080462: Update SunPKCS11 provider with PKCS11 v2.40 support
Added support for GCM, PSS, and other mechanisms

Reviewed-by: jnimeh
2019-06-11 21:30:28 +00:00
Jamil Nimeh
86be0cd272 8222678: Improve TLS negotiation
Reviewed-by: mullan, rhalade, mschoene
2019-05-02 17:43:26 -07:00
Weijun Wang
cd020a13c9 8222751: closed/test/jdk/sun/security/util/DerIndefLenConverter/IndefBerPkcs12.java fail
Reviewed-by: jnimeh, ascarpino, ssahoo, skoivu
2019-04-23 08:34:51 +08:00
Xue-Lei Andrew Fan
bac946663d 8218873: Improve JSSE endpoint checking
Reviewed-by: mullan, ahgross, rhalade
2019-04-11 17:58:18 -07:00
Jamil Nimeh
9785630af6 8219775: Certificate validation improvements
Reviewed-by: ascarpino, ssahoo, skoivu
2019-03-07 22:19:12 -08:00
Xue-Lei Andrew Fan
e06d193456 8218863: Better endpoint checks
Reviewed-by: ahgross, jnimeh, mullan, rhalade
2019-02-27 13:58:04 -08:00
Martin Balao
ebf8e1c0ac 8223482: Unsupported ciphersuites may be offered by a TLS client
Reviewed-by: xuelei
2019-05-28 19:01:38 -03:00
Claes Redestad
d3ccef96e5 8224589: Improve startup behavior of SecurityProperties
Reviewed-by: alanb
2019-05-22 13:19:04 +02:00
Weijun Wang
0f56400907 8223063: Support CNG RSA keys
Reviewed-by: mullan
2019-05-14 08:47:13 +08:00
Xue-Lei Andrew Fan
7aec6727ac 8221253: TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1 bytes
Reviewed-by: jnimeh
2019-05-10 12:33:40 -07:00
Sean Mullan
10e5d0b854 8191808: Configurable read timeout for CRLs
Reviewed-by: xuelei, coffeys
2019-05-09 13:49:08 -04:00
Xue-Lei Andrew Fan
62109f5906 8219991: New fix of the deadlock in sun.security.ssl.SSLSocketImpl
Reviewed-by: alanb, dfuchs
2019-05-06 08:54:19 -07:00
Xue-Lei Andrew Fan
eb59ebb177 8216326: SSLSocket stream close() does not close the associated socket
Reviewed-by: jnimeh
2019-04-16 16:59:09 -07:00
Valerie Peng
3b6b6b3cb3 8216039: TLS with BC and RSASSA-PSS breaks ECDHServerKeyExchange
Add internal Signature init methods to select provider based on both key and parameter

Reviewed-by: xuelei
2019-04-10 02:35:18 +00:00
Xue-Lei Andrew Fan
8263b618ba 8221882: Use fiber-friendly java.util.concurrent.locks in JSSE
Reviewed-by: alanb, dfuchs
2019-04-05 11:28:23 -07:00
Xue-Lei Andrew Fan
d812742d68 8163326: Update the default enabled cipher suites preference
Reviewed-by: mullan
2019-04-04 14:19:29 -07:00
Weijun Wang
cf973e3db4 8219861: Add new keytool -showinfo -tls command for displaying TLS configuration information
Reviewed-by: mullan
2019-04-04 20:22:16 +08:00
Xue-Lei Andrew Fan
661b5f1534 8217610: TLSv1.3 fail with ClassException when EC keys are stored in PKCS11
Reviewed-by: valeriep
2019-04-03 16:23:22 -07:00
Weijun Wang
e0f37c15e4 8157404: Unable to read certain PKCS12 keystores from SequenceInputStream
Reviewed-by: xuelei
2019-04-02 10:17:30 +08:00
Xue-Lei Andrew Fan
2eb8492163 8168261: Use server cipher suites preference by default
Reviewed-by: mullan
2019-04-01 16:50:17 -07:00
Weijun Wang
61485b75a9 8221257: Improve serial number generation mechanism for keytool -gencert
Reviewed-by: xuelei, mullan
2019-03-30 16:32:23 +08:00
Valerie Peng
e90036145a 8220016: Clean up redundant RSA services in the SunJSSE provider
Removed duplicated RSA signature/KF/KPG support in SunJSSE

Reviewed-by: xuelei
2019-03-29 00:39:49 +00:00
Xue-Lei Andrew Fan
28adfb6d0d 8218889: Improperly use of the Optional API
Reviewed-by: jnimeh, wetmore
2019-03-22 13:47:37 -07:00
Xue-Lei Andrew Fan
901e797c0c 8221270: Duplicated synchronized keywords in SSLSocketImpl
Reviewed-by: mullan
2019-03-21 13:32:08 -07:00
Chris Hegarty
b34264403a 8220598: Malformed copyright year range in a few files in java.base
Reviewed-by: dfuchs, lancea, rriggs, weijun
2019-03-14 09:10:56 +00:00