732 Commits

Author SHA1 Message Date
John Jiang
c0ce7d871f 8333046: Clean codes in sun.security.util.math
Reviewed-by: weijun
2024-06-01 05:58:00 +00:00
Pavel Rappo
3cff588a31 8332826: Make hashCode methods in ArraysSupport friendlier
Reviewed-by: redestad, liach
2024-05-30 09:33:30 +00:00
Volodymyr Paprotski
afed7d0b05 8329538: Accelerate P256 on x86_64 using Montgomery intrinsic
Reviewed-by: ihse, ascarpino, sviswanathan
2024-05-22 16:27:27 +00:00
Ben Perez
cd3a607576 8328864: NullPointerException in sun.security.jca.ProviderList.getService()
Reviewed-by: weijun
2024-05-02 18:50:38 +00:00
Jonathan Gibbons
9cc163a999 8330178: Clean up non-standard use of /** comments in java.base
Reviewed-by: darcy, iris, dfuchs, aivanov, naoto
2024-04-23 18:43:36 +00:00
Weijun Wang
0203c7e612 8318340: Improve RSA key implementations
Reviewed-by: rhalade, mschoene, valeriep, mullan
2024-04-16 11:17:05 +05:30
Sean Mullan
e702646545 8200566: DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails
Reviewed-by: weijun
2024-04-08 20:08:56 +00:00
Sean Coffey
3b582dff84 8051959: Add thread and timestamp options to java.security.debug system property
Reviewed-by: mullan, weijun
2024-04-02 08:51:13 +00:00
Aleksey Shipilev
4a14cba2f1 8329213: Better validation for com.sun.security.ocsp.useget option
Reviewed-by: mullan
2024-04-01 17:27:00 +00:00
Weijun Wang
59c2aff1ed 8323624: ProviderList.ServiceList does not need to be a list
Reviewed-by: mullan
2024-03-29 15:23:26 +00:00
Eirik Bjørsnøs
4eefda9102 8327779: Remove deprecated internal field sun.security.x509.X509Key.key
Reviewed-by: mullan
2024-03-28 20:00:07 +00:00
Aleksey Shipilev
614db2ea9e 8328638: Fallback option for POST-only OCSP requests
Reviewed-by: mullan, rhalade
2024-03-27 14:44:50 +00:00
Prasadrao Koppula
d44aaa37f9 8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message
Reviewed-by: djelinski, coffeys, jjiang, ascarpino
2024-03-22 07:02:37 +00:00
John Jiang
9059727df1 8327182: Move serverAlias into the loop
Reviewed-by: gli, mullan
2024-03-19 02:03:13 +00:00
Weijun Wang
569b05addf 8327818: Implement Kerberos debug with sun.security.util.Debug
Reviewed-by: coffeys, ssahoo
2024-03-18 15:36:28 +00:00
Daniel Jeliński
8f9899b23e 8325164: Named groups and signature schemes unavailable with SunPKCS11 in FIPS mode
Reviewed-by: valeriep
2024-03-13 19:09:52 +00:00
Hai-May Chao
ffd43c922e 8327461: KeyStore getEntry is not thread-safe
Reviewed-by: djelinski, weijun
2024-03-11 16:33:17 +00:00
Sean Mullan
c4845f01d2 8317431: Implement simpler Comparator when building certification paths
Reviewed-by: kdriver, weijun
2024-03-08 15:20:37 +00:00
Prajwal Kumaraswamy
bdd1aebea3 8312383: Log X509ExtendedKeyManager implementation class name in TLS/SSL connection
Reviewed-by: coffeys
2024-03-08 09:04:16 +00:00
Weijun Wang
b87d9cf2c9 8325506: Ensure randomness is only read from provided SecureRandom object
Reviewed-by: kdriver, valeriep
2024-02-26 21:52:40 +00:00
Anthony Scarpino
f62b5789ad 8311644: Server should not send bad_certificate alert when the client does not send any certificates
Reviewed-by: djelinski, jjiang, ssahoo
2024-02-26 16:49:01 +00:00
Christoph Langer
c2d9fa26ce 8326000: Remove obsolete comments for class sun.security.ssl.SunJSSE
Reviewed-by: mbaesken, ascarpino
2024-02-18 06:58:22 +00:00
Ben Perez
244573e719 8265372: Simplify PKCS9Attribute
Reviewed-by: weijun
2024-02-16 14:51:31 +00:00
Joe Darcy
fbd15b2087 8325189: Enable this-escape javac warning in java.base
Reviewed-by: alanb, erikj, naoto, smarks, ihse, joehw, lancea, weijun
2024-02-07 20:05:11 +00:00
Magnus Ihse Bursie
18e24d0619 8325109: Sort method modifiers in canonical order
Reviewed-by: aivanov, rriggs, darcy, prappo
2024-02-07 15:50:40 +00:00
John Jiang
fe78c0f191 8325022: Incorrect error message on client authentication
Reviewed-by: jnimeh, hchao, djelinski
2024-02-01 02:35:34 +00:00
Henry Jen
2063bb8ffa Merge
Reviewed-by: erikj
2024-01-17 01:41:52 +00:00
John Jiang
43d2d68da5 8320449: ECDHKeyAgreement should validate parameters before using them
Reviewed-by: mullan
2024-01-16 22:54:45 +00:00
Ferenc Rakoczi
bf7bd9a16c 8317547: Enhance TLS connection support
Reviewed-by: ahgross, rhalade, weijun, valeriep
2024-01-16 05:55:56 +00:00
Sean Mullan
a2544568f9 8308204: Enhanced certificate processing
Reviewed-by: mschoene, rhalade, jnimeh
2024-01-16 05:55:55 +00:00
Ben Perez
c328f9589d 8296787: Unify debug printing format of X.509 cert serial numbers
Reviewed-by: mullan, coffeys
2023-12-14 17:57:36 +00:00
Weijun Wang
45a9ade337 8202598: keytool -certreq output contains inconsistent line separators
Reviewed-by: hchao, mullan
2023-12-14 14:37:15 +00:00
Weijun Wang
11e4a925be 8320597: RSA signature verification fails on signed data that does not encode params correctly
Reviewed-by: mullan, valeriep
2023-12-07 23:25:56 +00:00
Weijun Wang
0a60b0f99e 8302233: HSS/LMS: keytool and jarsigner changes
Reviewed-by: mullan
2023-11-30 19:14:29 +00:00
John Jiang
2c4c6c9ba3 8320049: PKCS10 would not discard the cause when throw SignatureException on invalid key
Reviewed-by: mullan
2023-11-28 23:52:22 +00:00
Weijun Wang
fcb4df26f1 8320192: SHAKE256 does not work correctly if n >= 137
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: mpowers, valeriep
2023-11-20 23:28:48 +00:00
Hai-May Chao
a95062b39a 8319670: Improve comments describing system properties for TLS server and client for max chain length
Reviewed-by: mullan
2023-11-09 20:21:15 +00:00
Ben Perez
bfaf5704e7 8311546: Certificate name constraints improperly validated with leading period
Reviewed-by: mullan
2023-11-01 16:49:50 +00:00
Hai-May Chao
0064cf90ff 8311596: Add separate system properties for TLS server and client for maximum chain length
Reviewed-by: jnimeh, weijun, mullan
2023-10-31 15:22:18 +00:00
Andrew John Hughes
328b381075 8009550: PlatformPCSC should load versioned so
Reviewed-by: valeriep, stuefe
2023-10-31 02:06:41 +00:00
Weijun Wang
1ddf826aea 8316964: Security tools should not call System.exit
Reviewed-by: valeriep
2023-10-24 18:32:01 +00:00
Sean Mullan
7c80cb26df 8309966: Enhanced TLS connections
Reviewed-by: mschoene, hchao, rhalade, jnimeh
2023-10-17 22:45:06 +00:00
Bradford Wetmore
adca97b659 8286503: Enhance security classes
Reviewed-by: rhalade, mullan, skoivu, weijun
2023-10-17 22:45:06 +00:00
Weijun Wang
5145e5a40a 8318328: DHKEM should check XDH name in case-insensitive mode
Reviewed-by: ascarpino, hchao
2023-10-17 19:36:17 +00:00
Mark Powers
8c0d026d0f 8315042: NPE in PKCS7.parseOldSignedData
Reviewed-by: valeriep, weijun
2023-10-04 00:23:42 +00:00
Weijun Wang
d2e2c4cef1 8309667: TLS handshake fails because of ConcurrentModificationException in PKCS12KeyStore.engineGetEntry
Reviewed-by: djelinski, mullan
2023-10-02 21:53:12 +00:00
Jaikiran Pai
0259da9283 8301686: TLS 1.3 handshake fails if server_name doesn't match resuming session
Reviewed-by: djelinski, wetmore
2023-09-29 05:00:02 +00:00
Daniel Jeliński
fee9d3362c 8293176: SSLEngine handshaker does not send an alert after a bad parameters
Reviewed-by: mdonovan, jnimeh
2023-09-27 07:33:52 +00:00
John Jiang
2264667bba 8315422: getSoTimeout() would be in try block in SSLSocketImpl
Reviewed-by: jnimeh
2023-08-31 22:26:48 +00:00
Ben Perez
595fdd36c5 8314059: Remove PKCS7.verify()
Reviewed-by: mullan
2023-08-14 18:39:18 +00:00