Koushik Thirupattur
|
4377e7c9e8
|
8367008: Algorithm identifiers for HmacSHA* should always have NULL as params
Reviewed-by: weijun
|
2025-10-22 21:00:18 +00:00 |
|
Sean Mullan
|
e1d1fa91cf
|
8360937: Enhance certificate handling
Reviewed-by: ahgross, rhalade, jnibedita, ascarpino, naoto
|
2025-10-20 16:42:01 -07:00 |
|
Weijun Wang
|
a7a3a660e3
|
8354469: Keytool exposes the password in plain text when command is piped using | grep
Reviewed-by: mullan, smarks, naoto, hchao
|
2025-10-15 20:47:46 +00:00 |
|
Artur Barashev
|
233d3a8d43
|
8366244: TLS1.3 ChangeCipherSpec message received after the client's Finished message should trigger a connection abort with "unexpected message"
Reviewed-by: hchao
|
2025-10-09 13:59:31 +00:00 |
|
Daniel Jeliński
|
56baf64ada
|
8368520: TLS 1.3 KeyUpdate fails with SunPKCS11 provider
Reviewed-by: valeriep
|
2025-10-02 13:29:45 +00:00 |
|
Daniel Jeliński
|
3c9fd7688f
|
8368514: TLS stateless session ticket decryption fails on some providers
Reviewed-by: valeriep, abarashev
|
2025-09-25 18:47:32 +00:00 |
|
Daniel Jeliński
|
80cb0ead50
|
8367133: DTLS: fragmentation of Finished message results in handshake failure
Reviewed-by: jnimeh
|
2025-09-25 18:17:19 +00:00 |
|
Artur Barashev
|
569e78080b
|
8365820: Apply certificate scope constraints to algorithms in "signature_algorithms" extension when "signature_algorithms_cert" extension is not being sent
Reviewed-by: hchao
|
2025-09-25 14:44:06 +00:00 |
|
Alice Pellegrini
|
ba44656b97
|
8366454: TLS1.3 server fails with bad_record_mac when receiving encrypted records with empty body
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Reviewed-by: djelinski
|
2025-09-25 08:44:14 +00:00 |
|
Sean Coffey
|
47efe3c794
|
8343395: SSLLogger doesn't work for formatted messages
Reviewed-by: weijun
|
2025-09-22 18:41:07 +00:00 |
|
Daniel Fuchs
|
e8db14f584
|
8349910: Implement JEP 517: HTTP/3 for the HTTP Client API
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Bradford Wetmore <wetmore@openjdk.org>
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Co-authored-by: Darragh Clarke <dclarke@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Co-authored-by: Michael McMahon <michaelm@openjdk.org>
Co-authored-by: Volkan Yazici <vyazici@openjdk.org>
Co-authored-by: Conor Cleary <conor.cleary@oracle.com>
Co-authored-by: Patrick Concannon <patrick.concannon@oracle.com>
Co-authored-by: Rahul Yadav <rahul.r.yadav@oracle.com>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Reviewed-by: djelinski, jpai, aefimov, abarashev, michaelm
|
2025-09-22 10:12:12 +00:00 |
|
Artur Barashev
|
3798dcf75b
|
8367104: Check for RSASSA-PSS parameters when validating certificates against algorithm constraints
Reviewed-by: mullan
|
2025-09-19 13:06:25 +00:00 |
|
Ben Perez
|
72e5ad3d21
|
8365581: Optimize Java implementation of P256 arithmetic
Reviewed-by: jnimeh
|
2025-09-18 15:23:05 +00:00 |
|
Koushik Thirupattur
|
15d42c6d77
|
8366978: dead code in SunCertPathBuilder
Reviewed-by: mullan, hchao
|
2025-09-16 16:24:19 +00:00 |
|
Valerie Peng
|
35dabb1a5f
|
8244336: Restrict algorithms at JCE layer
Reviewed-by: mullan, ascarpino, abarashev
|
2025-09-12 20:16:33 +00:00 |
|
Artur Barashev
|
4ea8979b93
|
8365953: Key manager returns no certificates when handshakeSession is not an ExtendedSSLSession
Reviewed-by: djelinski, wetmore
|
2025-09-11 13:53:08 +00:00 |
|
Hai-May Chao
|
33d00a77f3
|
8294035: Remove null ids checking from keytool -gencrl
Reviewed-by: weijun
|
2025-08-28 16:36:14 +00:00 |
|
Kevin Driver
|
b5f450a599
|
8364226: Better ECDSASignature Memory Management
Reviewed-by: ascarpino, hchao
|
2025-08-04 15:59:57 +00:00 |
|
Artur Barashev
|
e544cd9920
|
8359956: Support algorithm constraints and certificate checks in SunX509 key manager
Reviewed-by: mullan
|
2025-07-31 13:57:19 +00:00 |
|
Koushik Thirupattur
|
413ac74ecc
|
8357682: sun.security.provider.certpath.Builder#getMatchingPolicies always returns null
Reviewed-by: mullan
|
2025-07-30 19:56:38 +00:00 |
|
Rajan Halade
|
3bdac53178
|
8361212: Remove AffirmTrust root CAs
Reviewed-by: mullan
|
2025-07-30 17:56:00 +00:00 |
|
Sean Coffey
|
f53d0519b9
|
8340312: sun.security.ssl.SSLLogger uses incorrect log level ALL for finest log events
Reviewed-by: wetmore
|
2025-07-28 16:32:58 +00:00 |
|
Kevin Driver
|
5ad102ca3f
|
8349594: Enhance TLS protocol support
Reviewed-by: rhalade, ahgross, wetmore, jnimeh
|
2025-07-15 12:02:14 -07:00 |
|
Daniel Jeliński
|
e9a62d79cd
|
8361125: Fix typo in onTradAbsence
Reviewed-by: hchao, mullan, shade
|
2025-07-01 19:19:25 +00:00 |
|
Alisen Chung
|
da7080fffb
|
8359761: JDK 25 RDP1 L10n resource files update
Reviewed-by: aivanov, almatvee, nbenalla, jlu, dnguyen, cstein, naoto
|
2025-06-27 16:13:03 +00:00 |
|
Artur Barashev
|
a471fe992f
|
8360539: DTLS handshakes fails due to improper cookie validation logic
Reviewed-by: ascarpino, hchao
|
2025-06-27 14:15:55 +00:00 |
|
Artur Barashev
|
2af869b193
|
8156715: TrustStoreManager does not buffer keystore input stream
Reviewed-by: ascarpino
|
2025-06-24 15:32:13 +00:00 |
|
Naoto Sato
|
9c3eaa49f7
|
8359732: Make standard i/o encoding related system properties StaticProperty
Reviewed-by: rriggs, alanb, vyazici
|
2025-06-23 16:16:28 +00:00 |
|
Volkan Yazici
|
eacfcd86d3
|
8357995: Use "stdin.encoding" for reading System.in with InputStreamReader/Scanner [core]
Reviewed-by: naoto, cjplummer
|
2025-06-16 07:27:05 +00:00 |
|
Anthony Scarpino
|
78158f30ae
|
8358099: PEM spec updates
Reviewed-by: mullan
|
2025-06-05 22:13:24 +00:00 |
|
Sean Coffey
|
42f48a39e8
|
8350689: Turn on timestamp and thread metadata by default for java.security.debug
Reviewed-by: mullan
|
2025-06-04 09:41:51 +00:00 |
|
Magnus Ihse Bursie
|
edf92721c2
|
8356977: UTF-8 cleanups
Reviewed-by: naoto, prr
|
2025-06-04 08:10:42 +00:00 |
|
Aleksey Shipilev
|
6f783e5fab
|
8358319: Pem.decode should cache the Pattern
Reviewed-by: ascarpino
|
2025-06-03 08:14:23 +00:00 |
|
Aleksey Shipilev
|
cff75eb606
|
8358316: PKCS8Key.getEncoded() can throw NPE after JDK-8298420
Reviewed-by: ascarpino
|
2025-06-03 08:14:05 +00:00 |
|
Bradford Wetmore
|
2926435d22
|
8341346: Add support for exporting TLS Keying Material
Reviewed-by: hchao, jnimeh, weijun
|
2025-05-30 23:06:36 +00:00 |
|
Anthony Scarpino
|
c9d6e01233
|
8358076: KeyFactory.getInstance("EdDSA").generatePublic(null) throws NPE
Reviewed-by: weijun
|
2025-05-30 20:13:00 +00:00 |
|
Artur Barashev
|
99048c3d4a
|
8357033: Reduce stateless session ticket size
Reviewed-by: wetmore, djelinski, ascarpino
|
2025-05-30 16:03:13 +00:00 |
|
Shaojin Wen
|
d922e318bc
|
8349400: Improve startup speed via eliminating nested classes
Reviewed-by: valeriep, rriggs
|
2025-05-29 20:09:01 +00:00 |
|
Anthony Scarpino
|
bb2c80c0e9
|
8298420: Implement JEP 470: PEM Encodings of Cryptographic Objects (Preview)
Reviewed-by: weijun, mr, mullan, jnimeh
|
2025-05-28 19:52:18 +00:00 |
|
Valerie Peng
|
4c0a0ab6bc
|
8353578: Refactor existing usage of internal HKDF impl to use the KDF API
Co-authored-by: Kevin Driver <kdriver@openjdk.org>
Reviewed-by: djelinski, wetmore, mullan, kdriver, weijun
|
2025-05-13 22:43:31 +00:00 |
|
Ben Perez
|
10dcdf1b47
|
8347606: Optimize Java implementation of ML-DSA
Reviewed-by: weijun
|
2025-05-13 22:31:55 +00:00 |
|
Koushik Thirupattur
|
68a118509a
|
8310003: Improve logging when default truststore is inaccessible
Reviewed-by: mullan
|
2025-05-09 19:20:17 +00:00 |
|
nibjen
|
2c1eb339d6
|
8350830: Values converted incorrectly when reading TLS session tickets
Reviewed-by: djelinski, ascarpino
|
2025-05-08 09:06:19 +00:00 |
|
Koushik Thirupattur
|
5d17a28c4e
|
8353001: Remove leftover Security Manager parsing code in sun.security.util.Debug
Reviewed-by: mullan
|
2025-05-06 18:10:46 +00:00 |
|
Weijun Wang
|
c514f135cc
|
8356051: Update SignatureUtil.java with the new KnownOIDs
Reviewed-by: rhalade
|
2025-05-02 00:25:19 +00:00 |
|
Weijun Wang
|
494ef6cb8c
|
8354305: SHAKE128 and SHAKE256 MessageDigest algorithms
Reviewed-by: valeriep, mullan
|
2025-05-01 23:34:35 +00:00 |
|
Valerie Peng
|
6536430a3b
|
8348732: SunJCE and SunPKCS11 have different PBE key encodings
Reviewed-by: weijun, fferrari
|
2025-05-01 23:08:16 +00:00 |
|
Artur Barashev
|
34807df762
|
8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension
Reviewed-by: mullan
|
2025-05-01 13:09:14 +00:00 |
|
Rajan Halade
|
1313349a2e
|
8350498: Remove two Camerfirma root CA certificates
Reviewed-by: mullan
|
2025-04-30 18:14:10 +00:00 |
|
Roger Riggs
|
2f8448034f
|
8354053: Remove unused JavaIOFilePermissionAccess
Reviewed-by: liach, weijun
|
2025-04-28 18:21:46 +00:00 |
|