75 Commits

Author SHA1 Message Date
Valerie Peng
d64820dfef 8209398: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed with "PKCS11Exception: CKR_ATTRIBUTE_SENSITIVE"
Reviewed-by: hchao, weijun
2021-12-22 19:50:51 +00:00
Valerie Peng
83e6a4c0e9 8255409: Support the new C_GetInterfaceList, C_GetInterface, and C_SessionCancel APIs in PKCS#11 v3.0
Reviewed-by: ascarpino, weijun
2021-12-08 23:04:15 +00:00
Brent Christian
ec7cb6d5d3 8276447: Deprecate finalization-related methods for removal
Reviewed-by: rriggs, alanb, lancea, darcy, mchung, serb, smarks, prr
2021-12-08 00:23:15 +00:00
Martin Balao
ea8d3c92c6 8271566: DSA signature length value is not accurate in P11Signature
Reviewed-by: valeriep
2021-12-06 20:31:55 +00:00
Valerie Peng
669c90e23b 8278099: two sun/security/pkcs11/Signature tests failed with AssertionError
Reviewed-by: dcubed
2021-12-02 19:28:42 +00:00
Magnus Ihse Bursie
c393ee8f59 8276632: Use blessed modifier order in security-libs code
Reviewed-by: mullan
2021-11-05 14:09:58 +00:00
Valerie Peng
e63c1486dc 8264849: Add KW and KWP support to PKCS11 provider
Reviewed-by: ascarpino
2021-10-19 20:50:56 +00:00
Joe Darcy
7326481143 8274393: Suppress more warnings on non-serializable non-transient instance fields in security libs
Reviewed-by: weijun
2021-09-30 17:39:05 +00:00
Sean Coffey
0d745ae8fd 8269034: AccessControlException for SunPKCS11 daemon threads
Reviewed-by: valeriep
2021-06-29 22:52:45 +00:00
Valerie Peng
80dc262e81 8265500: Some impls of javax.crypto.Cipher.init() do not throw UnsupportedOperationExc for unsupported modes
Reviewed-by: xuelei
2021-06-17 23:27:54 +00:00
Sean Coffey
bdeaeb47d0 8240256: Better resource cleaning for SunPKCS11 Provider
Reviewed-by: valeriep
2021-06-03 06:45:06 +00:00
Weijun Wang
508cec7535 8267521: Post JEP 411 refactoring: maximum covering > 50K
Reviewed-by: dfuchs, prr
2021-06-02 15:48:50 +00:00
Weijun Wang
40d23a0c0b 8267543: Post JEP 411 refactoring: security
Reviewed-by: mullan
2021-06-02 15:47:57 +00:00
Weijun Wang
6765f90250 8266459: Implement JEP 411: Deprecate the Security Manager for Removal
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: erikj, darcy, chegar, naoto, joehw, alanb, mchung, kcr, prr, lancea
2021-06-02 11:57:31 +00:00
Martin Balao
bdbe23b9cb 8265462: Handle multiple slots in the NSS Internal Module from SunPKCS11's Secmod
Reviewed-by: valeriep
2021-05-18 22:34:27 +00:00
Valerie Peng
7ab6dc83df 6676643: Improve current C_GetAttributeValue native implementation
Reviewed-by: xuelei
2021-05-14 23:04:37 +00:00
Valerie Peng
5d8c1cc8a0 8255410: Add ChaCha20 and Poly1305 support to SunPKCS11 provider
Reviewed-by: jnimeh
2021-04-29 21:02:41 +00:00
Weijun Wang
f834557ae0 8258915: Temporary buffer cleanup
Reviewed-by: valeriep
2021-04-22 18:11:43 +00:00
Alex Blewitt
ebbce91e79 8264681: Use the blessed modifier order in java.security
Reviewed-by: mullan, shade
2021-04-14 06:01:00 +00:00
Martin Balao
1ee80e03ad 8261355: No data buffering in SunPKCS11 Cipher encryption when the underlying mechanism has no padding
Reviewed-by: valeriep
2021-04-12 20:58:08 +00:00
Ziyi Luo
a5d7de2351 8263404: RsaPrivateKeySpec is always recognized as RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
Co-authored-by: Greg Rubin <rubin@amazon.com>
Reviewed-by: valeriep
2021-03-29 20:14:47 +00:00
Ziyi Luo
a777e82cd8 8254717: isAssignableFrom checks in KeyFactorySpi.engineGetKeySpec appear to be backwards
Reviewed-by: jnimeh
2021-03-04 15:17:53 +00:00
Martin Balao
47c7dc7734 8258833: Cancel multi-part cipher operations in SunPKCS11 after failures
Reviewed-by: valeriep
2021-01-25 18:01:59 +00:00
Valerie Peng
68cf65d284 8023980: JCE doesn't provide any class to handle RSA private key in PKCS#1
Reviewed-by: weijun
2021-01-18 02:26:17 +00:00
Martin Balao
4be2173478 8259319: Illegal package access when SunPKCS11 requires SunJCE's classes
Reviewed-by: valeriep, mullan
2021-01-12 23:44:19 +00:00
Valerie Peng
78c9fb92aa 8258851: Mismatch in SunPKCS11 provider registration properties and actual implementation
Reviewed-by: weijun
2020-12-23 22:36:45 +00:00
Valerie Peng
cd94606c0c 8258186: Replace use of JNI_COMMIT mode with mode 0
Reviewed-by: xuelei, alanb
2020-12-23 20:47:54 +00:00
Valerie Peng
78be334c38 8242332: Add SHA3 support to SunPKCS11 provider
Reviewed-by: xuelei
2020-12-05 23:47:35 +00:00
Anthony Scarpino
55f5542ca2 8026976: ECParameters, Point does not match field size
Reviewed-by: xuelei
2020-12-03 18:05:53 +00:00
Valerie Peng
7d8985243d 8244154: Update SunPKCS11 provider with PKCS11 v3.0 header files
Reviewed-by: weijun
2020-12-01 00:49:39 +00:00
Zdenek Zambersky
1cc09ccaef 8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher
Reviewed-by: valeriep
2020-08-04 17:19:21 -03:00
Weijun Wang
507816d550 8244565: Accept PKCS #8 with version number 1
Reviewed-by: valeriep
2020-06-05 07:53:50 +08:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Erik Joelsson
4df99aa7ae 8226346: Build better binary builders
Reviewed-by: tbell
2019-12-13 08:27:51 -08:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)
Reviewed-by: weijun
2020-04-01 18:38:05 -07:00
Martin Balao
84f3e86749 8238555: Allow Initialization of SunPKCS11 with NSS when there are external FIPS modules in the NSSDB
Reviewed-by: mullan, valeriep
2020-02-05 12:20:36 -03:00
Matthias Baesken
3f140fafab 8239457: call ReleaseStringUTFChars before early returns in Java_sun_security_pkcs11_wrapper_PKCS11_connect
Reviewed-by: alanb, clanger
2020-02-19 13:37:07 +01:00
Valerie Peng
8969aeb16b Merge 2020-02-12 01:13:55 +00:00
Valerie Peng
fc3b42fc8e 8238898: Missing hash characters for header on license file
Fixed the typos and corrected the formatting

Reviewed-by: weijun
2020-02-12 01:11:59 +00:00
Valerie Peng
1f17842583 8236512: PKCS11 Connection closed after Cipher.doFinal and NoPadding
Removed killSession() calls in certain impl classes when cancelling operations

Reviewed-by: xuelei
2020-02-12 00:56:27 +00:00
Valerie Peng
efc96d1c07 8236897: Fix the copyright header for pkcs11gcm2.h
Add the "Classpath" exception to existing header

Reviewed-by: weijun
2020-01-10 02:52:25 +00:00
Sean Coffey
a0b8244416 8233801: GCMEmptyIv.java test fails on Solaris 11.4
Reviewed-by: valeriep
2019-11-21 11:31:58 +00:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
2019-11-12 01:36:17 -08:00
Valerie Peng
f14e3a60b2 8232950: SUNPKCS11 Provider incorrectly check key length for PSS Signatures
Fixed to treat the queried key size values as bits instead of bytes

Reviewed-by: ascarpino, xuelei
2019-10-31 02:22:42 +00:00
Valerie Peng
381e90eb6b 8229243: SunPKCS11-Solaris provider tests failing on Solaris 11.4
For CK_GCM_PARAMS, try the spec definition first before falling back to the header file definition

Reviewed-by: xuelei
2019-10-08 00:01:20 +00:00
Matthias Baesken
0e264cfe36 8231222: fix pkcs11 P11_DEBUG guarded native traces
Reviewed-by: clanger
2019-09-23 17:02:08 +02:00
Valerie Peng
46db25e188 8176837: SunPKCS11 provider needs to check more details on PKCS11 Mechanism
Disable mechanisms with partial support, e.g. can decrypt but cannot encrypt

Reviewed-by: xuelei
2019-09-20 21:33:24 +00:00
Matthias Baesken
2f496251ac 8230861: missing ReleaseStringUTFChars in Java_sun_security_pkcs11_wrapper_PKCS11_connect
Reviewed-by: alanb, stuefe
2019-09-11 16:54:53 +02:00
Valerie Peng
6212473fc4 8228835: Memory leak in PKCS11 provider when using AES GCM
Updated freeCKMechanismPtr to free mechanism-specific memories

Reviewed-by: jnimeh
2019-08-14 01:40:29 +00:00