855 Commits

Author SHA1 Message Date
Koushik Thirupattur
4377e7c9e8 8367008: Algorithm identifiers for HmacSHA* should always have NULL as params
Reviewed-by: weijun
2025-10-22 21:00:18 +00:00
Sean Mullan
e1d1fa91cf 8360937: Enhance certificate handling
Reviewed-by: ahgross, rhalade, jnibedita, ascarpino, naoto
2025-10-20 16:42:01 -07:00
Weijun Wang
a7a3a660e3 8354469: Keytool exposes the password in plain text when command is piped using | grep
Reviewed-by: mullan, smarks, naoto, hchao
2025-10-15 20:47:46 +00:00
Artur Barashev
233d3a8d43 8366244: TLS1.3 ChangeCipherSpec message received after the client's Finished message should trigger a connection abort with "unexpected message"
Reviewed-by: hchao
2025-10-09 13:59:31 +00:00
Daniel Jeliński
56baf64ada 8368520: TLS 1.3 KeyUpdate fails with SunPKCS11 provider
Reviewed-by: valeriep
2025-10-02 13:29:45 +00:00
Daniel Jeliński
3c9fd7688f 8368514: TLS stateless session ticket decryption fails on some providers
Reviewed-by: valeriep, abarashev
2025-09-25 18:47:32 +00:00
Daniel Jeliński
80cb0ead50 8367133: DTLS: fragmentation of Finished message results in handshake failure
Reviewed-by: jnimeh
2025-09-25 18:17:19 +00:00
Artur Barashev
569e78080b 8365820: Apply certificate scope constraints to algorithms in "signature_algorithms" extension when "signature_algorithms_cert" extension is not being sent
Reviewed-by: hchao
2025-09-25 14:44:06 +00:00
Alice Pellegrini
ba44656b97 8366454: TLS1.3 server fails with bad_record_mac when receiving encrypted records with empty body
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Reviewed-by: djelinski
2025-09-25 08:44:14 +00:00
Sean Coffey
47efe3c794 8343395: SSLLogger doesn't work for formatted messages
Reviewed-by: weijun
2025-09-22 18:41:07 +00:00
Daniel Fuchs
e8db14f584 8349910: Implement JEP 517: HTTP/3 for the HTTP Client API
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Bradford Wetmore <wetmore@openjdk.org>
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Co-authored-by: Darragh Clarke <dclarke@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Co-authored-by: Michael McMahon <michaelm@openjdk.org>
Co-authored-by: Volkan Yazici <vyazici@openjdk.org>
Co-authored-by: Conor Cleary <conor.cleary@oracle.com>
Co-authored-by: Patrick Concannon <patrick.concannon@oracle.com>
Co-authored-by: Rahul Yadav <rahul.r.yadav@oracle.com>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Reviewed-by: djelinski, jpai, aefimov, abarashev, michaelm
2025-09-22 10:12:12 +00:00
Artur Barashev
3798dcf75b 8367104: Check for RSASSA-PSS parameters when validating certificates against algorithm constraints
Reviewed-by: mullan
2025-09-19 13:06:25 +00:00
Ben Perez
72e5ad3d21 8365581: Optimize Java implementation of P256 arithmetic
Reviewed-by: jnimeh
2025-09-18 15:23:05 +00:00
Koushik Thirupattur
15d42c6d77 8366978: dead code in SunCertPathBuilder
Reviewed-by: mullan, hchao
2025-09-16 16:24:19 +00:00
Valerie Peng
35dabb1a5f 8244336: Restrict algorithms at JCE layer
Reviewed-by: mullan, ascarpino, abarashev
2025-09-12 20:16:33 +00:00
Artur Barashev
4ea8979b93 8365953: Key manager returns no certificates when handshakeSession is not an ExtendedSSLSession
Reviewed-by: djelinski, wetmore
2025-09-11 13:53:08 +00:00
Hai-May Chao
33d00a77f3 8294035: Remove null ids checking from keytool -gencrl
Reviewed-by: weijun
2025-08-28 16:36:14 +00:00
Kevin Driver
b5f450a599 8364226: Better ECDSASignature Memory Management
Reviewed-by: ascarpino, hchao
2025-08-04 15:59:57 +00:00
Artur Barashev
e544cd9920 8359956: Support algorithm constraints and certificate checks in SunX509 key manager
Reviewed-by: mullan
2025-07-31 13:57:19 +00:00
Koushik Thirupattur
413ac74ecc 8357682: sun.security.provider.certpath.Builder#getMatchingPolicies always returns null
Reviewed-by: mullan
2025-07-30 19:56:38 +00:00
Rajan Halade
3bdac53178 8361212: Remove AffirmTrust root CAs
Reviewed-by: mullan
2025-07-30 17:56:00 +00:00
Sean Coffey
f53d0519b9 8340312: sun.security.ssl.SSLLogger uses incorrect log level ALL for finest log events
Reviewed-by: wetmore
2025-07-28 16:32:58 +00:00
Kevin Driver
5ad102ca3f 8349594: Enhance TLS protocol support
Reviewed-by: rhalade, ahgross, wetmore, jnimeh
2025-07-15 12:02:14 -07:00
Daniel Jeliński
e9a62d79cd 8361125: Fix typo in onTradAbsence
Reviewed-by: hchao, mullan, shade
2025-07-01 19:19:25 +00:00
Alisen Chung
da7080fffb 8359761: JDK 25 RDP1 L10n resource files update
Reviewed-by: aivanov, almatvee, nbenalla, jlu, dnguyen, cstein, naoto
2025-06-27 16:13:03 +00:00
Artur Barashev
a471fe992f 8360539: DTLS handshakes fails due to improper cookie validation logic
Reviewed-by: ascarpino, hchao
2025-06-27 14:15:55 +00:00
Artur Barashev
2af869b193 8156715: TrustStoreManager does not buffer keystore input stream
Reviewed-by: ascarpino
2025-06-24 15:32:13 +00:00
Naoto Sato
9c3eaa49f7 8359732: Make standard i/o encoding related system properties StaticProperty
Reviewed-by: rriggs, alanb, vyazici
2025-06-23 16:16:28 +00:00
Volkan Yazici
eacfcd86d3 8357995: Use "stdin.encoding" for reading System.in with InputStreamReader/Scanner [core]
Reviewed-by: naoto, cjplummer
2025-06-16 07:27:05 +00:00
Anthony Scarpino
78158f30ae 8358099: PEM spec updates
Reviewed-by: mullan
2025-06-05 22:13:24 +00:00
Sean Coffey
42f48a39e8 8350689: Turn on timestamp and thread metadata by default for java.security.debug
Reviewed-by: mullan
2025-06-04 09:41:51 +00:00
Magnus Ihse Bursie
edf92721c2 8356977: UTF-8 cleanups
Reviewed-by: naoto, prr
2025-06-04 08:10:42 +00:00
Aleksey Shipilev
6f783e5fab 8358319: Pem.decode should cache the Pattern
Reviewed-by: ascarpino
2025-06-03 08:14:23 +00:00
Aleksey Shipilev
cff75eb606 8358316: PKCS8Key.getEncoded() can throw NPE after JDK-8298420
Reviewed-by: ascarpino
2025-06-03 08:14:05 +00:00
Bradford Wetmore
2926435d22 8341346: Add support for exporting TLS Keying Material
Reviewed-by: hchao, jnimeh, weijun
2025-05-30 23:06:36 +00:00
Anthony Scarpino
c9d6e01233 8358076: KeyFactory.getInstance("EdDSA").generatePublic(null) throws NPE
Reviewed-by: weijun
2025-05-30 20:13:00 +00:00
Artur Barashev
99048c3d4a 8357033: Reduce stateless session ticket size
Reviewed-by: wetmore, djelinski, ascarpino
2025-05-30 16:03:13 +00:00
Shaojin Wen
d922e318bc 8349400: Improve startup speed via eliminating nested classes
Reviewed-by: valeriep, rriggs
2025-05-29 20:09:01 +00:00
Anthony Scarpino
bb2c80c0e9 8298420: Implement JEP 470: PEM Encodings of Cryptographic Objects (Preview)
Reviewed-by: weijun, mr, mullan, jnimeh
2025-05-28 19:52:18 +00:00
Valerie Peng
4c0a0ab6bc 8353578: Refactor existing usage of internal HKDF impl to use the KDF API
Co-authored-by: Kevin Driver <kdriver@openjdk.org>
Reviewed-by: djelinski, wetmore, mullan, kdriver, weijun
2025-05-13 22:43:31 +00:00
Ben Perez
10dcdf1b47 8347606: Optimize Java implementation of ML-DSA
Reviewed-by: weijun
2025-05-13 22:31:55 +00:00
Koushik Thirupattur
68a118509a 8310003: Improve logging when default truststore is inaccessible
Reviewed-by: mullan
2025-05-09 19:20:17 +00:00
nibjen
2c1eb339d6 8350830: Values converted incorrectly when reading TLS session tickets
Reviewed-by: djelinski, ascarpino
2025-05-08 09:06:19 +00:00
Koushik Thirupattur
5d17a28c4e 8353001: Remove leftover Security Manager parsing code in sun.security.util.Debug
Reviewed-by: mullan
2025-05-06 18:10:46 +00:00
Weijun Wang
c514f135cc 8356051: Update SignatureUtil.java with the new KnownOIDs
Reviewed-by: rhalade
2025-05-02 00:25:19 +00:00
Weijun Wang
494ef6cb8c 8354305: SHAKE128 and SHAKE256 MessageDigest algorithms
Reviewed-by: valeriep, mullan
2025-05-01 23:34:35 +00:00
Valerie Peng
6536430a3b 8348732: SunJCE and SunPKCS11 have different PBE key encodings
Reviewed-by: weijun, fferrari
2025-05-01 23:08:16 +00:00
Artur Barashev
34807df762 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension
Reviewed-by: mullan
2025-05-01 13:09:14 +00:00
Rajan Halade
1313349a2e 8350498: Remove two Camerfirma root CA certificates
Reviewed-by: mullan
2025-04-30 18:14:10 +00:00
Roger Riggs
2f8448034f 8354053: Remove unused JavaIOFilePermissionAccess
Reviewed-by: liach, weijun
2025-04-28 18:21:46 +00:00