60 Commits

Author SHA1 Message Date
Fei Yang
b25d894015 8252204: AArch64: Implement SHA3 accelerator/intrinsic
Co-authored-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Co-authored-by: Dong Bo <dongbo4@huawei.com>
Reviewed-by: aph, kvn
2020-10-22 04:38:39 +00:00
Philippe Marschall
2a406f3ce5 8138732: Rename @HotSpotIntrinsicCandidate to @IntrinsicCandidate and move it to the jdk.internal.vm.annotation package
Reviewed-by: dholmes, alanb, psandoz, kvn, egahlin
2020-09-30 20:05:07 +00:00
Sergey Tsypanov
f55dd9d40e 8251548: Remove unnecessary explicit initialization of volatile variables in security-libs code
Reviewed-by: mullan
2020-09-18 21:26:59 +00:00
Valerie Peng
40206822f4 8172366: Support SHA-3 based signatures
Enhance default JDK providers including SUN, SunRsaSign, and SunEC, with signatures using SHA-3 family of digests.

Reviewed-by: xuelei
2020-09-15 20:28:48 +00:00
Sean Mullan
f879698c63 8241003: Deprecate "denigrated" java.security.cert APIs that represent DNs as Principal or String objects
Reviewed-by: xuelei, valeriep, weijun
2020-08-26 13:31:10 -04:00
Ludovic Henry
339016a0f2 8250902: Implement MD5 Intrinsics on x86
Reviewed-by: kvn, vdeshpande, ascarpino
2020-08-05 11:32:15 -07:00
Mikael Vidstedt
1982432db4 Merge 2020-07-14 23:29:45 -07:00
Sean Coffey
3d9bad16d1 8218021: Have jarsigner preserve posix permission attributes
Reviewed-by: weijun, lancea, alanb
2020-07-02 08:17:31 +00:00
Valerie Peng
f968f32789 8246077: Cloneable test in HmacCore seems questionable
Updated java.security.MessageDigest and Signature classes to return Cloneable obj for Cloneable spi obj

Reviewed-by: weijun, xuelei, coffeys
2020-06-15 23:30:49 +00:00
Weijun Wang
2536cbf2cf 8245679: KeyStore cannot probe PKCS12 keystore if BouncyCastle is the top security provider
Reviewed-by: mullan
2020-06-13 17:49:15 +08:00
Weijun Wang
507816d550 8244565: Accept PKCS #8 with version number 1
Reviewed-by: valeriep
2020-06-05 07:53:50 +08:00
Weijun Wang
bcbe46b0b3 8246397: Use KnownOIDs for known OIDs
Reviewed-by: xuelei
2020-06-04 10:04:32 +08:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Anthony Scarpino
fd28aad72d 8166597: Crypto support for the EdDSA Signature Algorithm
Reviewed-by: weijun, mullan, wetmore
2020-05-18 09:42:52 -07:00
Hai-May Chao
76507eef63 8242060: Add revocation checking to jarsigner
Reviewed-by: mullan, weijun
2020-05-07 10:48:06 +08:00
Vipin Sharma
cc05419e1a 8242366: Fix JavaDoc warnings
Reviewed-by: dfuchs, mullan, prappo, weijun
2020-04-15 20:42:43 +01:00
Alexey Bakhtin
76d534986b 8241960: The SHA3 message digests impl of SUN provider are not thread safe after cloned
Fix sun.security.provider.SHA3 class to correctly clone its lanes field

Reviewed-by: valeriep
2020-04-03 22:39:00 +00:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)
Reviewed-by: weijun
2020-04-01 18:38:05 -07:00
Pavel Rappo
17ff85d4ad 8241014: Miscellaneous typos in documentation comments
Reviewed-by: igerasim, prappo, psandoz, rriggs, weijun
2020-03-20 20:54:56 +00:00
Sean Mullan
da6daad2e5 8234042: Better factory production of certificates
Reviewed-by: weijun, rhalade, mschoene
2020-01-17 08:04:14 -05:00
Xue-Lei Andrew Fan
4e430ffbb6 8239264: Clearup the legacy ObjectIdentifier constructor from int array
Reviewed-by: jnimeh
2020-02-17 18:52:50 -08:00
Matthias Baesken
ef41763d32 8237962: give better error output for invalid OCSP response intervals in CertPathValidator checks
Reviewed-by: clanger, mullan
2020-02-03 09:39:39 +01:00
Weijun Wang
f3815c85a1 8231139: Improved keystore support
Reviewed-by: mullan, ahgross
2019-10-09 17:42:38 +08:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
2019-11-12 01:36:17 -08:00
Joe Darcy
fbb4093562 8231262: Suppress warnings on non-serializable instance fields in security libs serializable classes
Reviewed-by: mullan, chegar
2019-10-09 09:57:41 -07:00
Joe Darcy
6d4ef5aaf3 8229999: Apply java.io.Serial annotations to security types in java.base
Reviewed-by: rriggs, mullan
2019-08-29 10:52:21 -07:00
Valerie Peng
effe3eb806 8228613: java.security.Provider#getServices order is no longer deterministic
Changed to use SunEntries.DEF_SECURE_RANDOM_ALGO instead of relying on ordering of SecureRandom services

Reviewed-by: weijun
2019-08-14 00:57:15 +00:00
Sean Mullan
10e5d0b854 8191808: Configurable read timeout for CRLs
Reviewed-by: xuelei, coffeys
2019-05-09 13:49:08 -04:00
Sean Mullan
939d40e1a8 8218618: Program fails when using JDK addressed by UNC path and using Security Manager
Reviewed-by: weijun
2019-03-07 14:29:43 -05:00
Sean Coffey
63663b64d1 8218553: Enhance keystore load debug output
Reviewed-by: weijun
2019-02-07 12:09:17 +00:00
Sean Coffey
36d0987f4d 8214532: Update RFC 2459 references in javadoc to RFC 5280
Reviewed-by: mullan
2018-12-19 18:21:38 +00:00
Claes Redestad
a3df1d618e 8215281: Use String.isEmpty() when applicable in java.base
Reviewed-by: dfuchs, alanb
2018-12-13 15:31:05 +01:00
Valerie Peng
0b05ebed2e 7092821: java.security.Provider.getService() is synchronized and became scalability bottleneck
Changed Provider class to use ConcurrentHashMap and default providers to use putService()

Reviewed-by: weijun, mullan
2018-12-13 01:15:21 +00:00
Roger Riggs
938b844088 8214971: Replace use of string.equals("") with isEmpty()
Reviewed-by: jlaskey, prappo, lancea, dfuchs, redestad
2018-12-07 11:51:17 -05:00
Sean Coffey
73ad9c4a00 8148188: Enhance the security libraries to record events of interest
Reviewed-by: egahlin, mullan, weijun, xuelei
2018-11-20 13:12:48 +00:00
Mandy Chung
9ffe7e1205 8211122: Reduce the number of internal classes made accessible to jdk.unsupported
Reviewed-by: alanb, dfuchs, kvn
2018-11-06 10:01:16 -08:00
Ivan Gerasimov
2ae27da3bc 8200381: Typos in javadoc - missing verb "be" and alike
Reviewed-by: lancea, darcy, wetmore
2018-10-02 10:19:07 -07:00
Ivan Gerasimov
acaf155de7 8209851: Algorithm name is compared via reference identity
Reviewed-by: mullan
2018-08-23 09:36:13 -07:00
Sean Coffey
50ec35819d 8209129: Further improvements to cipher buffer management
Reviewed-by: weijun, igerasim
2018-08-23 11:37:14 +01:00
Sean Coffey
15cef25bb0 8208675: Remove legacy sun.security.key.serial.interop property
Reviewed-by: mullan
2018-08-17 22:20:47 +01:00
Weijun Wang
33a96c6df9 8209416: Refactoring GetPropertyAction calls in security libs
Reviewed-by: xuelei, rriggs
2018-08-14 22:39:34 +08:00
Sean Coffey
7a791910c3 8208583: Better management of internal KeyStore buffers
Reviewed-by: weijun
2018-08-03 14:14:59 +01:00
Weijun Wang
b9bfd45c73 8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer
Reviewed-by: xuelei
2018-08-01 13:35:08 +08:00
Anthony Scarpino
4e46cc1392 8204196: integer cleanup
Reviewed-by: xuelei
2018-07-20 09:55:15 -07:00
Roger Riggs
4098f2560a 8066709: Make some JDK system properties read only
Reviewed-by: lancea, sundar, bchristi, weijun, mchung, alanb, mullan
2018-06-27 09:36:34 -04:00
Weijun Wang
3ad65642c8 8202608: CommonSeeder test needs a white-box testing mechanism to replace the default entropy source
Reviewed-by: xuelei
2018-06-26 10:43:43 +08:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Ivan Gerasimov
72ac0bfc88 8192789: Avoid using AtomicReference in sun.security.provider.PolicyFile
Reviewed-by: mullan, ahgross
2017-12-07 12:25:09 -08:00
Sean Mullan
d32a31283c 8191358: Restore TSA certificate expiration check
Reviewed-by: coffeys, rhalade
2017-12-08 09:37:28 -05:00
Claes Redestad
f5a681373f 8152821: Merge jdk.internal.misc.JavaSecurityAccess and jdk.internal.misc.JavaSecurityProtectionDomainAccess shared secrets
Reviewed-by: mullan
2018-04-13 01:04:33 +02:00