1582 Commits

Author SHA1 Message Date
Jaikiran Pai
e8dadf4baa 8378003: JarURLConnection.getCertificates() and getCodeSigners() incorrectly return null for signed JAR files after JDK-8377338
Reviewed-by: mullan, dfuchs
2026-02-20 15:13:07 +00:00
Sean Coffey
c988a4e534 8044609: javax.net.debug options not working and documented as expected
Reviewed-by: wetmore
2026-02-12 09:45:59 +00:00
Jaikiran Pai
3a588e5bed 8377338: URLJarFile$URLJarFileEntry need not clone the arrays returned by getCertificates() and getCodeSigners()
Reviewed-by: mullan
2026-02-11 02:11:56 +00:00
Daniel Jeliński
d97ea5a8cd 8377549: [BACKOUT] Need to keep leading zeros in TlsPremasterSecret of TLS1.3 DHKeyAgreement
Reviewed-by: mullan
2026-02-10 14:48:52 +00:00
Mikhail Yankelevich
264fdc5b4e 8374808: Add new methods to KeyStore and KeyStoreSpi that return the creation date as an Instant instead of Date
Reviewed-by: weijun
2026-02-10 12:18:03 +00:00
Alan Bateman
cd5256d5a6 8374170: I/O Poller updates
Reviewed-by: michaelm
2026-02-06 15:19:01 +00:00
Damon Fenacci
bfd5bdaf7f 8374582: [REDO] Move input validation checks to Java for java.lang.StringCoding intrinsics
Co-authored-by: Volkan Yazici <vyazici@openjdk.org>
Reviewed-by: chagedorn, thartmann, vyazici
2026-02-06 07:44:25 +00:00
Daniel Fuchs
d7523ec8d2 8376031: HttpsURLConnection.getServerCertificates() throws "java.lang.IllegalStateException: connection not yet open" for the HEAD method
Reviewed-by: jpai
2026-02-04 10:13:41 +00:00
Weijun Wang
e51ccef9cb 8347938: Add Support for the Latest ML-KEM and ML-DSA Private Key Encodings
Reviewed-by: mullan, bperez, mpowers
2026-02-03 16:32:21 +00:00
Daniel Gredler
992a8ef46b 8376226: CharsetEncoder.canEncode(CharSequence) is much slower than necessary
Reviewed-by: alanb, naoto
2026-01-27 13:20:26 +00:00
Valerie Peng
e55124041e 8375549: ConcurrentModificationException if jdk.crypto.disabledAlgorithms has multiple entries with known oid
Reviewed-by: mullan, coffeys
2026-01-23 19:46:40 +00:00
Daniel Jeliński
25d2b52ab9 8328046: Need to keep leading zeros in TlsPremasterSecret of TLS1.3 DHKeyAgreement
Reviewed-by: hchao
2026-01-22 21:48:28 +00:00
Hai-May Chao
96a2649e29 8373408: SHA1withECDSA is not required for ECDHE and ECDSA
Reviewed-by: djelinski, ascarpino
2026-01-22 17:41:00 +00:00
Artur Barashev
025041ba04 8370885: Default namedGroups values are not being filtered against algorithm constraints
Reviewed-by: hchao
2026-01-22 13:11:42 +00:00
Brent Christian
e25a5a4821 Merge
Reviewed-by: kcr, prr, smarks
2026-01-21 01:28:38 +00:00
Hai-May Chao
21dc41f744 8314323: Implement JEP 527: TLS 1.3 Hybrid Key Exchange
Co-authored-by: Jamil Nimeh <jnimeh@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: wetmore, mullan
2026-01-20 16:16:38 +00:00
Jamil Nimeh
07f981f6b0 8368032: Enhance Certificate Checking
Reviewed-by: ahgross, coffeys, rhalade, mullan, abarashev
2026-01-18 20:22:55 -08:00
Hai-May Chao
a1b039aa98 8286032: keytool -list -alias should not assume it is always a certificate
Reviewed-by: weijun
2026-01-15 22:33:34 +00:00
Artur Barashev
78a106ffbb 8375183: Remove unused SSLConfiguration.maximumProtocolVersion variable
Reviewed-by: djelinski, myankelevich, hchao
2026-01-15 13:18:20 +00:00
John Jiang
a726e834b6 8373231: ECDSAOperations::toAffinePoint is redundant
Reviewed-by: mullan
2026-01-10 00:52:34 +00:00
Mark Powers
92abc6dfe4 8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA
Reviewed-by: mullan
2026-01-08 17:35:43 +00:00
Volkan Yazici
7e18de137c 8374210: [BACKOUT] Move input validation checks to Java for java.lang.StringCoding intrinsics
Reviewed-by: shade, thartmann
2026-01-07 09:22:38 +00:00
Weijun Wang
fbc59ac0a1 8374555: No need for visible input warning in s.s.u.Password when not reading from System.in
Reviewed-by: coffeys, hchao
2026-01-06 18:05:27 +00:00
Fernando Guallini
532a0a65b1 8372950: Pem.pemEncoded should cache the Pattern
Reviewed-by: ascarpino
2026-01-06 10:53:27 +00:00
Artur Barashev
3439512401 8374317: Change GCM IV size to 12 bytes when encrypting/decrypting TLS session ticket
Reviewed-by: djelinski, mpowers, ascarpino
2026-01-02 13:28:15 +00:00
Sergey Bylokhov
2d1be8a9e6 8374391: Update the copyright year to 2025 in the remaining files under src/ where it was missed
Reviewed-by: aivanov
2025-12-31 17:15:34 +00:00
Sergey Bylokhov
36d2c277c4 8374327: Update copyright year to 2025 for files in java.base added/updated by commits in 2025
Reviewed-by: jpai
2025-12-31 09:13:32 +00:00
Ioi Lam
232b41b222 8373392: Replace CDS object subgraphs with @AOTSafeClassInitializer
Reviewed-by: liach, heidinga
2025-12-17 22:16:38 +00:00
Damon Nguyen
fb99ba6ccd 8373119: JDK 26 RDP1 L10n resource files update
Reviewed-by: jlu, asemenyuk, almatvee
2025-12-16 21:19:33 +00:00
Daniel Jeliński
895232fc65 8372731: Detailed authentication failure messages
Reviewed-by: dfuchs, michaelm
2025-12-15 08:40:05 +00:00
Ferenc Rakoczi
6ec36d348b 8373059: Test sun/security/provider/acvp/ML_DSA_Intrinsic_Test.java should pass on Aarch64
Reviewed-by: weijun, vpaprotski
2025-12-12 16:04:56 +00:00
Artur Barashev
a99f340e1b 8371721: Refactor checkTrusted methods in X509TrustManagerImpl
Reviewed-by: coffeys, djelinski
2025-12-12 14:39:42 +00:00
Brian Burkhalter
74dca863c2 8371718: (sc) Channels.new{Input,Output}Stream can allocate unbounded memory for a socket channel
Reviewed-by: alanb
2025-12-10 22:46:35 +00:00
Naoto Sato
b2daf9de30 8355522: Remove the java.locale.useOldISOCodes system property
Reviewed-by: jlu, joehw
2025-12-09 18:21:12 +00:00
Sergey Chernyshev
7da91533aa 8369950: TLS connection to IPv6 address fails with BCJSSE due to IllegalArgumentException
Co-authored-by: Mikhail Yankelevich <myankelevich@openjdk.org>
Reviewed-by: djelinski, vyazici, dfuchs, myankelevich
2025-12-08 09:06:21 +00:00
Alan Bateman
afb6a0c2fe 8372958: SocketInputStream.read throws SocketException instead of returning -1 when input shutdown
Reviewed-by: djelinski, michaelm
2025-12-03 13:03:51 +00:00
Per Minborg
7278d2e8e5 8372258: Improve TypeVariable support
Reviewed-by: liach
2025-12-02 09:39:29 +00:00
Hai-May Chao
c2ea75b81f 8353749: Improve security warning when using JKS or JCEKS keystores
Reviewed-by: weijun
2025-11-21 01:10:35 +00:00
Chen Liang
d887359b5a 8370976: Review the behavioral changes of core reflection descriptor parsing migration
Reviewed-by: rriggs, jvernee
2025-11-21 00:38:44 +00:00
Weijun Wang
45a2fd37f0 8325448: Hybrid Public Key Encryption
Reviewed-by: mullan, ascarpino, abarashev
2025-11-20 15:15:41 +00:00
Sean Coffey
852141b9d4 8372004: Have SSLLogger implement System.Logger
Reviewed-by: dfuchs, weijun
2025-11-20 07:32:06 +00:00
Chen Liang
b6d83eda6b 8371960: Missing null check in AnnotatedType annotation accessor methods
Reviewed-by: alanb
2025-11-18 15:14:20 +00:00
Per Minborg
f946449997 8366178: Implement JEP 526: Lazy Constants (Second Preview)
8371882: Improve documentation for JEP 526: Lazy Constants

Reviewed-by: jvernee, mcimadamore
2025-11-18 12:20:23 +00:00
Alan Bateman
26460b6f12 8353835: Implement JEP 500: Prepare to Make Final Mean Final
Reviewed-by: liach, vlivanov, dholmes, vyazici
2025-11-18 08:06:18 +00:00
Mark Powers
52ffe8a096 8371156: PBKDF2 default values should not be DER encoded
Reviewed-by: weijun
2025-11-17 14:59:30 +00:00
Anthony Scarpino
ad3dfaf1fc 8360564: Implement JEP 524: PEM Encodings of Cryptographic Objects (Second Preview)
Reviewed-by: weijun, mullan
2025-11-14 21:08:36 +00:00
Weijun Wang
2d4f2fde22 8349732: Add support for JARs signed with ML-DSA
Reviewed-by: mullan
2025-11-10 14:39:22 +00:00
Volkan Yazici
866faa9d40 8366577: Deprecate java.net.Socket::setPerformancePreferences
Reviewed-by: dfuchs, alanb, jpai
2025-11-07 08:15:42 +00:00
Volkan Yazici
c1476fca9d 8366575: Remove SDP support
Reviewed-by: alanb, erikj, jpai, michaelm
2025-11-04 08:03:30 +00:00
Artur Barashev
02a7217491 8366364: Return enabled signature schemes with SSLConfiguration#getSSLParameters() call
Reviewed-by: mullan
2025-11-03 15:05:16 +00:00