847 Commits

Author SHA1 Message Date
Alice Pellegrini
ba44656b97 8366454: TLS1.3 server fails with bad_record_mac when receiving encrypted records with empty body
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Reviewed-by: djelinski
2025-09-25 08:44:14 +00:00
Sean Coffey
47efe3c794 8343395: SSLLogger doesn't work for formatted messages
Reviewed-by: weijun
2025-09-22 18:41:07 +00:00
Daniel Fuchs
e8db14f584 8349910: Implement JEP 517: HTTP/3 for the HTTP Client API
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Bradford Wetmore <wetmore@openjdk.org>
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Co-authored-by: Darragh Clarke <dclarke@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Co-authored-by: Michael McMahon <michaelm@openjdk.org>
Co-authored-by: Volkan Yazici <vyazici@openjdk.org>
Co-authored-by: Conor Cleary <conor.cleary@oracle.com>
Co-authored-by: Patrick Concannon <patrick.concannon@oracle.com>
Co-authored-by: Rahul Yadav <rahul.r.yadav@oracle.com>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Reviewed-by: djelinski, jpai, aefimov, abarashev, michaelm
2025-09-22 10:12:12 +00:00
Artur Barashev
3798dcf75b 8367104: Check for RSASSA-PSS parameters when validating certificates against algorithm constraints
Reviewed-by: mullan
2025-09-19 13:06:25 +00:00
Ben Perez
72e5ad3d21 8365581: Optimize Java implementation of P256 arithmetic
Reviewed-by: jnimeh
2025-09-18 15:23:05 +00:00
Koushik Thirupattur
15d42c6d77 8366978: dead code in SunCertPathBuilder
Reviewed-by: mullan, hchao
2025-09-16 16:24:19 +00:00
Valerie Peng
35dabb1a5f 8244336: Restrict algorithms at JCE layer
Reviewed-by: mullan, ascarpino, abarashev
2025-09-12 20:16:33 +00:00
Artur Barashev
4ea8979b93 8365953: Key manager returns no certificates when handshakeSession is not an ExtendedSSLSession
Reviewed-by: djelinski, wetmore
2025-09-11 13:53:08 +00:00
Hai-May Chao
33d00a77f3 8294035: Remove null ids checking from keytool -gencrl
Reviewed-by: weijun
2025-08-28 16:36:14 +00:00
Kevin Driver
b5f450a599 8364226: Better ECDSASignature Memory Management
Reviewed-by: ascarpino, hchao
2025-08-04 15:59:57 +00:00
Artur Barashev
e544cd9920 8359956: Support algorithm constraints and certificate checks in SunX509 key manager
Reviewed-by: mullan
2025-07-31 13:57:19 +00:00
Koushik Thirupattur
413ac74ecc 8357682: sun.security.provider.certpath.Builder#getMatchingPolicies always returns null
Reviewed-by: mullan
2025-07-30 19:56:38 +00:00
Rajan Halade
3bdac53178 8361212: Remove AffirmTrust root CAs
Reviewed-by: mullan
2025-07-30 17:56:00 +00:00
Sean Coffey
f53d0519b9 8340312: sun.security.ssl.SSLLogger uses incorrect log level ALL for finest log events
Reviewed-by: wetmore
2025-07-28 16:32:58 +00:00
Kevin Driver
5ad102ca3f 8349594: Enhance TLS protocol support
Reviewed-by: rhalade, ahgross, wetmore, jnimeh
2025-07-15 12:02:14 -07:00
Daniel Jeliński
e9a62d79cd 8361125: Fix typo in onTradAbsence
Reviewed-by: hchao, mullan, shade
2025-07-01 19:19:25 +00:00
Alisen Chung
da7080fffb 8359761: JDK 25 RDP1 L10n resource files update
Reviewed-by: aivanov, almatvee, nbenalla, jlu, dnguyen, cstein, naoto
2025-06-27 16:13:03 +00:00
Artur Barashev
a471fe992f 8360539: DTLS handshakes fails due to improper cookie validation logic
Reviewed-by: ascarpino, hchao
2025-06-27 14:15:55 +00:00
Artur Barashev
2af869b193 8156715: TrustStoreManager does not buffer keystore input stream
Reviewed-by: ascarpino
2025-06-24 15:32:13 +00:00
Naoto Sato
9c3eaa49f7 8359732: Make standard i/o encoding related system properties StaticProperty
Reviewed-by: rriggs, alanb, vyazici
2025-06-23 16:16:28 +00:00
Volkan Yazici
eacfcd86d3 8357995: Use "stdin.encoding" for reading System.in with InputStreamReader/Scanner [core]
Reviewed-by: naoto, cjplummer
2025-06-16 07:27:05 +00:00
Anthony Scarpino
78158f30ae 8358099: PEM spec updates
Reviewed-by: mullan
2025-06-05 22:13:24 +00:00
Sean Coffey
42f48a39e8 8350689: Turn on timestamp and thread metadata by default for java.security.debug
Reviewed-by: mullan
2025-06-04 09:41:51 +00:00
Magnus Ihse Bursie
edf92721c2 8356977: UTF-8 cleanups
Reviewed-by: naoto, prr
2025-06-04 08:10:42 +00:00
Aleksey Shipilev
6f783e5fab 8358319: Pem.decode should cache the Pattern
Reviewed-by: ascarpino
2025-06-03 08:14:23 +00:00
Aleksey Shipilev
cff75eb606 8358316: PKCS8Key.getEncoded() can throw NPE after JDK-8298420
Reviewed-by: ascarpino
2025-06-03 08:14:05 +00:00
Bradford Wetmore
2926435d22 8341346: Add support for exporting TLS Keying Material
Reviewed-by: hchao, jnimeh, weijun
2025-05-30 23:06:36 +00:00
Anthony Scarpino
c9d6e01233 8358076: KeyFactory.getInstance("EdDSA").generatePublic(null) throws NPE
Reviewed-by: weijun
2025-05-30 20:13:00 +00:00
Artur Barashev
99048c3d4a 8357033: Reduce stateless session ticket size
Reviewed-by: wetmore, djelinski, ascarpino
2025-05-30 16:03:13 +00:00
Shaojin Wen
d922e318bc 8349400: Improve startup speed via eliminating nested classes
Reviewed-by: valeriep, rriggs
2025-05-29 20:09:01 +00:00
Anthony Scarpino
bb2c80c0e9 8298420: Implement JEP 470: PEM Encodings of Cryptographic Objects (Preview)
Reviewed-by: weijun, mr, mullan, jnimeh
2025-05-28 19:52:18 +00:00
Valerie Peng
4c0a0ab6bc 8353578: Refactor existing usage of internal HKDF impl to use the KDF API
Co-authored-by: Kevin Driver <kdriver@openjdk.org>
Reviewed-by: djelinski, wetmore, mullan, kdriver, weijun
2025-05-13 22:43:31 +00:00
Ben Perez
10dcdf1b47 8347606: Optimize Java implementation of ML-DSA
Reviewed-by: weijun
2025-05-13 22:31:55 +00:00
Koushik Thirupattur
68a118509a 8310003: Improve logging when default truststore is inaccessible
Reviewed-by: mullan
2025-05-09 19:20:17 +00:00
nibjen
2c1eb339d6 8350830: Values converted incorrectly when reading TLS session tickets
Reviewed-by: djelinski, ascarpino
2025-05-08 09:06:19 +00:00
Koushik Thirupattur
5d17a28c4e 8353001: Remove leftover Security Manager parsing code in sun.security.util.Debug
Reviewed-by: mullan
2025-05-06 18:10:46 +00:00
Weijun Wang
c514f135cc 8356051: Update SignatureUtil.java with the new KnownOIDs
Reviewed-by: rhalade
2025-05-02 00:25:19 +00:00
Weijun Wang
494ef6cb8c 8354305: SHAKE128 and SHAKE256 MessageDigest algorithms
Reviewed-by: valeriep, mullan
2025-05-01 23:34:35 +00:00
Valerie Peng
6536430a3b 8348732: SunJCE and SunPKCS11 have different PBE key encodings
Reviewed-by: weijun, fferrari
2025-05-01 23:08:16 +00:00
Artur Barashev
34807df762 8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension
Reviewed-by: mullan
2025-05-01 13:09:14 +00:00
Rajan Halade
1313349a2e 8350498: Remove two Camerfirma root CA certificates
Reviewed-by: mullan
2025-04-30 18:14:10 +00:00
Roger Riggs
2f8448034f 8354053: Remove unused JavaIOFilePermissionAccess
Reviewed-by: liach, weijun
2025-04-28 18:21:46 +00:00
Bradford Wetmore
21b0f5ea15 8355637: SSLSessionImpl's "serialization" list documentation is incorrectly ordered
Reviewed-by: ascarpino
2025-04-26 05:46:05 +00:00
Sean Coffey
1ec64811a3 8350582: Correct the parsing of the ssl value in javax.net.debug
Reviewed-by: wetmore, hchao
2025-04-24 12:01:34 +00:00
Artur Barashev
abb23828f9 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled
Reviewed-by: mullan
2025-04-17 13:45:47 +00:00
Ferenc Rakoczi
465c8e6583 8349721: Add aarch64 intrinsics for ML-KEM
Reviewed-by: adinn
2025-04-16 12:35:24 +00:00
Artur Barashev
ed30fce6df 8347847: Enhance jar file support
Reviewed-by: rhalade, jnibedita, pkumaraswamy, ahgross, hchao, weijun, mullan
2025-04-16 13:05:32 +05:30
Jamil Nimeh
e91b3f0c3d 8337692: Better TLS connection support
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: rhalade, valeriep, pkumaraswamy, mpowers, ahgross, mbalao
2025-04-16 13:05:32 +05:30
Roger Riggs
af5db51306 8353641: Deprecate core library permission classes for removal
Reviewed-by: mullan, iris
2025-04-10 19:19:31 +00:00
Ferenc Rakoczi
e87ff328d5 8351034: Add AVX-512 intrinsics for ML-DSA
Reviewed-by: sviswanathan, lmesnik, vpaprotski, jbhateja
2025-04-09 21:15:45 +00:00