828 Commits

Author SHA1 Message Date
Naoto Sato
9c3eaa49f7 8359732: Make standard i/o encoding related system properties StaticProperty
Reviewed-by: rriggs, alanb, vyazici
2025-06-23 16:16:28 +00:00
Volkan Yazici
eacfcd86d3 8357995: Use "stdin.encoding" for reading System.in with InputStreamReader/Scanner [core]
Reviewed-by: naoto, cjplummer
2025-06-16 07:27:05 +00:00
Anthony Scarpino
78158f30ae 8358099: PEM spec updates
Reviewed-by: mullan
2025-06-05 22:13:24 +00:00
Sean Coffey
42f48a39e8 8350689: Turn on timestamp and thread metadata by default for java.security.debug
Reviewed-by: mullan
2025-06-04 09:41:51 +00:00
Magnus Ihse Bursie
edf92721c2 8356977: UTF-8 cleanups
Reviewed-by: naoto, prr
2025-06-04 08:10:42 +00:00
Aleksey Shipilev
6f783e5fab 8358319: Pem.decode should cache the Pattern
Reviewed-by: ascarpino
2025-06-03 08:14:23 +00:00
Aleksey Shipilev
cff75eb606 8358316: PKCS8Key.getEncoded() can throw NPE after JDK-8298420
Reviewed-by: ascarpino
2025-06-03 08:14:05 +00:00
Bradford Wetmore
2926435d22 8341346: Add support for exporting TLS Keying Material
Reviewed-by: hchao, jnimeh, weijun
2025-05-30 23:06:36 +00:00
Anthony Scarpino
c9d6e01233 8358076: KeyFactory.getInstance("EdDSA").generatePublic(null) throws NPE
Reviewed-by: weijun
2025-05-30 20:13:00 +00:00
Artur Barashev
99048c3d4a 8357033: Reduce stateless session ticket size
Reviewed-by: wetmore, djelinski, ascarpino
2025-05-30 16:03:13 +00:00
Shaojin Wen
d922e318bc 8349400: Improve startup speed via eliminating nested classes
Reviewed-by: valeriep, rriggs
2025-05-29 20:09:01 +00:00
Anthony Scarpino
bb2c80c0e9 8298420: Implement JEP 470: PEM Encodings of Cryptographic Objects (Preview)
Reviewed-by: weijun, mr, mullan, jnimeh
2025-05-28 19:52:18 +00:00
Valerie Peng
4c0a0ab6bc 8353578: Refactor existing usage of internal HKDF impl to use the KDF API
Co-authored-by: Kevin Driver <kdriver@openjdk.org>
Reviewed-by: djelinski, wetmore, mullan, kdriver, weijun
2025-05-13 22:43:31 +00:00
Ben Perez
10dcdf1b47 8347606: Optimize Java implementation of ML-DSA
Reviewed-by: weijun
2025-05-13 22:31:55 +00:00
Koushik Thirupattur
68a118509a 8310003: Improve logging when default truststore is inaccessible
Reviewed-by: mullan
2025-05-09 19:20:17 +00:00
nibjen
2c1eb339d6 8350830: Values converted incorrectly when reading TLS session tickets
Reviewed-by: djelinski, ascarpino
2025-05-08 09:06:19 +00:00
Koushik Thirupattur
5d17a28c4e 8353001: Remove leftover Security Manager parsing code in sun.security.util.Debug
Reviewed-by: mullan
2025-05-06 18:10:46 +00:00
Weijun Wang
c514f135cc 8356051: Update SignatureUtil.java with the new KnownOIDs
Reviewed-by: rhalade
2025-05-02 00:25:19 +00:00
Weijun Wang
494ef6cb8c 8354305: SHAKE128 and SHAKE256 MessageDigest algorithms
Reviewed-by: valeriep, mullan
2025-05-01 23:34:35 +00:00
Valerie Peng
6536430a3b 8348732: SunJCE and SunPKCS11 have different PBE key encodings
Reviewed-by: weijun, fferrari
2025-05-01 23:08:16 +00:00
Artur Barashev
34807df762 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension
Reviewed-by: mullan
2025-05-01 13:09:14 +00:00
Rajan Halade
1313349a2e 8350498: Remove two Camerfirma root CA certificates
Reviewed-by: mullan
2025-04-30 18:14:10 +00:00
Roger Riggs
2f8448034f 8354053: Remove unused JavaIOFilePermissionAccess
Reviewed-by: liach, weijun
2025-04-28 18:21:46 +00:00
Bradford Wetmore
21b0f5ea15 8355637: SSLSessionImpl's "serialization" list documentation is incorrectly ordered
Reviewed-by: ascarpino
2025-04-26 05:46:05 +00:00
Sean Coffey
1ec64811a3 8350582: Correct the parsing of the ssl value in javax.net.debug
Reviewed-by: wetmore, hchao
2025-04-24 12:01:34 +00:00
Artur Barashev
abb23828f9 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled
Reviewed-by: mullan
2025-04-17 13:45:47 +00:00
Ferenc Rakoczi
465c8e6583 8349721: Add aarch64 intrinsics for ML-KEM
Reviewed-by: adinn
2025-04-16 12:35:24 +00:00
Artur Barashev
ed30fce6df 8347847: Enhance jar file support
Reviewed-by: rhalade, jnibedita, pkumaraswamy, ahgross, hchao, weijun, mullan
2025-04-16 13:05:32 +05:30
Jamil Nimeh
e91b3f0c3d 8337692: Better TLS connection support
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: rhalade, valeriep, pkumaraswamy, mpowers, ahgross, mbalao
2025-04-16 13:05:32 +05:30
Roger Riggs
af5db51306 8353641: Deprecate core library permission classes for removal
Reviewed-by: mullan, iris
2025-04-10 19:19:31 +00:00
Ferenc Rakoczi
e87ff328d5 8351034: Add AVX-512 intrinsics for ML-DSA
Reviewed-by: sviswanathan, lmesnik, vpaprotski, jbhateja
2025-04-09 21:15:45 +00:00
Artur Barashev
dfa79c3730 8340321: Disable SHA-1 in TLS/DTLS 1.2 handshake signatures
Reviewed-by: mullan
2025-04-08 13:02:50 +00:00
Volodymyr Paprotski
885cf0ff8d 8353671: Remove dead code missed in JDK-8350459
Reviewed-by: sviswanathan, mullan
2025-04-07 18:44:04 +00:00
Koushik Thirupattur
0d4d155816 8349890: Option -Djava.security.debug=x509,ava breaks special chars
Reviewed-by: mullan
2025-04-07 17:29:13 +00:00
Koushik Thirupattur
3e96f5cbca 8351366: Remove the java.security.debug=scl option
Reviewed-by: hchao, mullan
2025-03-31 16:54:12 +00:00
Artur Barashev
9c06dcb439 8349583: Add mechanism to disable signature schemes based on their TLS scope
Reviewed-by: mullan, ascarpino
2025-03-31 16:45:40 +00:00
Anthony Scarpino
e4e62789c7 8346129: Simplify EdDSA & XDH curve name usage
Reviewed-by: weijun, abarashev
2025-03-31 15:59:30 +00:00
Volodymyr Paprotski
a269bef04c 8350459: MontgomeryIntegerPolynomialP256 multiply intrinsic with AVX2 on x86_64
Reviewed-by: ascarpino, sviswanathan
2025-03-28 15:20:31 +00:00
Artur Barashev
9a49418138 8345940: Migrate security-related resources from Java classes to properties files
Reviewed-by: jlu, weijun, erikj
2025-03-11 20:07:10 +00:00
Justin Lu
7c9a7840ea 8351223: Update localized resources in keytool and jarsigner
Reviewed-by: weijun
2025-03-06 22:54:24 +00:00
Ferenc Rakoczi
3230894bdd 8348561: Add aarch64 intrinsics for ML-DSA
Reviewed-by: adinn
2025-03-04 14:41:35 +00:00
Mikhail Yankelevich
7734f8ed13 8349664: HEX dump should always use ASCII or ISO_8859_1
Reviewed-by: weijun
2025-02-19 18:56:26 +00:00
konanki sreenath
70a6c0b7ac 8346094: Harden X509CertImpl.getExtensionValue for NPE cases
Reviewed-by: coffeys, weijun
2025-02-19 16:47:54 +00:00
Weijun Wang
aba60a9274 8189441: Define algorithm names for keys derived from KeyAgreement
Reviewed-by: mullan
2025-01-27 18:09:17 +00:00
Jamil Nimeh
f8e81d2339 8347506: Compatible OCSP readtimeout property with OCSP timeout
Reviewed-by: mullan, hchao
2025-01-24 23:06:57 +00:00
Mark Powers
907350e9e8 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs
Reviewed-by: mullan
2025-01-24 23:05:34 +00:00
Weijun Wang
0ee6ba9c4c 8347596: Update HSS/LMS public key encoding
Reviewed-by: mullan
2025-01-14 23:06:45 +00:00
Weijun Wang
fa5ff82eb3 8342062: Reformat keytool and jarsigner output for keys with a named parameter set
Reviewed-by: mullan
2025-01-13 13:43:52 +00:00
Bradford Wetmore
68c6623d38 8345840: Add missing TLS handshake messages to SSLHandshake.java
Reviewed-by: jnimeh
2024-12-23 19:05:07 +00:00
Justin Lu
fd0207d593 8345327: JDK 24 RDP1 L10n resource files update
Reviewed-by: naoto, dnguyen, joehw, almatvee, sgehwolf, jlahoda, prappo, asemenyuk
2024-12-16 21:00:56 +00:00