92 Commits

Author SHA1 Message Date
Jesper Wilhelmsson
d40735db17 Merge 2018-08-29 19:48:28 +02:00
Adam Petcher
c3cc65bd08 8201317: X25519/X448 code improvements
Minor code/comment improvements

Reviewed-by: xuelei
2018-08-29 12:00:47 -04:00
Xue-Lei Andrew Fan
8b373393e6 8209965: The "supported_groups" extension in ServerHellos
Reviewed-by: ascarpino
2018-08-27 09:46:24 -07:00
Bradford Wetmore
5b511a4a78 8207317: SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy
Reviewed-by: xuelei
2018-08-21 11:30:48 -07:00
Rajan Halade
02a3769cfa 8206176: Remove the temporary tls13VN field
Reviewed-by: xuelei, wetmore
2018-08-14 17:21:44 -07:00
Xue-Lei Andrew Fan
66e8f27bd8 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 16:47:56 -07:00
Leo Jiang
6c703b8589 8207948: JDK 11 L10n resource file update msg drop 10
Reviewed-by: naoto
2018-07-25 22:48:53 -07:00
Xue-Lei Andrew Fan
d2b2780859 8208166: Still unable to use custom SSLEngine with default TrustManagerFactory after JDK-8207029
Reviewed-by: ascarpino
2018-07-25 17:21:04 -07:00
Jamil Nimeh
8158cca17d 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-25 09:48:31 -07:00
Valerie Peng
df08003471 8206171: Signature#getParameters for RSASSA-PSS throws ProviderException when not initialized
Changed SunRsaSign and SunMSCAPI provider to return null and updated javadoc

Reviewed-by: weijun, mullan
2018-07-23 23:18:19 +00:00
Weijun Wang
32a2f54b64 8207223: SSL Handshake failures are reported with more generic SSLException
Reviewed-by: xuelei
2018-07-21 21:46:42 +08:00
Anthony Scarpino
4e46cc1392 8204196: integer cleanup
Reviewed-by: xuelei
2018-07-20 09:55:15 -07:00
Ivan Gerasimov
acaf155de7 8209851: Algorithm name is compared via reference identity
Reviewed-by: mullan
2018-08-23 09:36:13 -07:00
Sean Coffey
50ec35819d 8209129: Further improvements to cipher buffer management
Reviewed-by: weijun, igerasim
2018-08-23 11:37:14 +01:00
Jamil Nimeh
8eb45613db 8208350: Disable all DES cipher suites
Reviewed-by: xuelei, mullan
2018-08-20 15:37:47 -07:00
Mikael Vidstedt
95db6924f2 Merge 2018-08-20 14:19:30 -07:00
Sean Coffey
15cef25bb0 8208675: Remove legacy sun.security.key.serial.interop property
Reviewed-by: mullan
2018-08-17 22:20:47 +01:00
Joe Darcy
07ed14c5cf 8209304: Deprecate serialVersionUID fields in interfaces
Reviewed-by: lancea, mullan, rriggs, smarks
2018-08-17 13:37:01 -07:00
Xue-Lei Andrew Fan
611c53c860 8207009: TLS 1.3 half-close and synchronization issues
Reviewed-by: jnimeh, mullan, wetmore
2018-08-14 18:16:47 -07:00
Weijun Wang
33a96c6df9 8209416: Refactoring GetPropertyAction calls in security libs
Reviewed-by: xuelei, rriggs
2018-08-14 22:39:34 +08:00
Weijun Wang
ea95e1ef2e 8201290: keytool importcert fails with CertificateParsingException if unknown certificate algorithms should be imported
Reviewed-by: mullan, xuelei
2018-08-10 17:07:44 +08:00
Joe Darcy
4bac00436d 8209024: Use SuppressWarnings on serialVersionUID fields in interfaces
Reviewed-by: bpb, rriggs, mullan
2018-08-06 14:29:22 -07:00
Sean Coffey
7a791910c3 8208583: Better management of internal KeyStore buffers
Reviewed-by: weijun
2018-08-03 14:14:59 +01:00
Weijun Wang
b9bfd45c73 8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer
Reviewed-by: xuelei
2018-08-01 13:35:08 +08:00
Phil Race
1387c87093 Merge 2018-07-26 10:00:40 -07:00
Phil Race
28e828130d Merge 2018-07-19 10:17:22 -07:00
Jamil Nimeh
1f273bde76 8207237: SSLSocket#setEnabledCipherSuites is accepting empty string
Reviewed-by: xuelei
2018-07-18 14:32:46 -07:00
Jesper Wilhelmsson
4fc510cc89 Merge 2018-07-14 02:14:54 +02:00
Xue-Lei Andrew Fan
a98ec3e8bd 8207029: Unable to use custom SSLEngine with default TrustManagerFactory after updating to JDK 11 b21
Reviewed-by: wetmore
2018-07-13 07:08:59 -07:00
Weijun Wang
11e4fac62b 8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error
Reviewed-by: xuelei
2018-07-12 08:44:39 +08:00
Sibabrata Sahoo
99f911cc71 8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
Fixed SSLSessionImpl.getLocalPrincipal() implementation when client side authentication is not enabled.

Reviewed-by: xuelei
2018-07-04 11:49:46 -07:00
Valerie Peng
ecc5979769 8205720: KeyFactory#getKeySpec and translateKey thorws NullPointerException with Invalid key
Updated SunRsaSign provider to check and throw InvalidKeyException for null key algo/format/encoding

Reviewed-by: xuelei
2018-06-30 00:33:05 +00:00
Roger Riggs
4098f2560a 8066709: Make some JDK system properties read only
Reviewed-by: lancea, sundar, bchristi, weijun, mchung, alanb, mullan
2018-06-27 09:36:34 -04:00
Adam Petcher
a7e35cb988 8203228: Branch-free output conversion for X25519 and X448
Make some field arithmetic operations for X25519/X448 more resilient against side-channel attacks

Reviewed-by: ascarpino
2018-06-26 11:14:27 -04:00
Weijun Wang
60ff77bd97 8201815: Use Mozilla Public Suffix List
Reviewed-by: michaelm, erikj, ihse
2018-06-26 18:55:48 +08:00
Weijun Wang
230268522b 8202299: Java Keystore fails to load PKCS12/PFX certificates created in WindowsServer2016
Reviewed-by: mullan, xuelei
2018-06-26 10:43:50 +08:00
Weijun Wang
3ad65642c8 8202608: CommonSeeder test needs a white-box testing mechanism to replace the default entropy source
Reviewed-by: xuelei
2018-06-26 10:43:43 +08:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Valerie Peng
b0af57a018 8179098: Crypto AES/ECB encryption/decryption performance regression (introduced in jdk9b73)
Do bounds check per encryption/decryption call instead of per block

Reviewed-by: ascarpino, redestad
2018-07-13 02:36:42 +00:00
Weijun Wang
b8d80042d7 8206189: sun/security/pkcs12/EmptyPassword.java fails with Sequence tag error
Reviewed-by: xuelei
2018-07-12 08:44:39 +08:00
Weijun Wang
578576f523 8205445: Add RSASSA-PSS Signature support to SunMSCAPI
Reviewed-by: xuelei
2018-06-22 21:42:00 +08:00
Valerie Peng
8e127e5c26 8204152: SignedObject throws NullPointerException for null keys with an initialized Signature object
Check for null and throw InvalidKeyException to maintain same behavior

Reviewed-by: xuelei
2018-06-19 23:33:31 +00:00
Valerie Peng
9e8d9fe1ee 8146293: Add support for RSASSA-PSS Signature algorithm
Add RSASSA-PSS key and signature support to SunRsaSign provider

Reviewed-by: wetmore
2018-05-21 23:40:52 +00:00
Adam Petcher
f15ab37909 8181594: Efficient and constant-time modular arithmetic
Field arithmetic library for crypto algorithms like Poly1305 and X25519

Reviewed-by: xuelei
2018-05-08 09:21:51 -04:00
Claes Redestad
0f478d2cfd 8202419: Avoid creating Permission constants early
Reviewed-by: alanb, mullan
2018-04-30 16:27:23 +02:00
Weijun Wang
bde972d645 8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
Reviewed-by: xuelei
2018-07-19 00:14:40 +08:00
Weijun Wang
a825fe0a2d 8207250: setUseClientMode post handshake with the same value as before does not throw IAE
Reviewed-by: xuelei
2018-07-19 00:14:29 +08:00
Adam Petcher
108461949f 8206929: Check session context for TLS 1.3 session resumption
Additional checks to prevent TLS 1.3 sessions from being resumed when they shouldn't

Reviewed-by: xuelei
2018-07-17 13:04:40 -04:00
Ivan Gerasimov
72ac0bfc88 8192789: Avoid using AtomicReference in sun.security.provider.PolicyFile
Reviewed-by: mullan, ahgross
2017-12-07 12:25:09 -08:00
Weijun Wang
cf8a91378d 8189969: Manifest better manifest entries
Reviewed-by: mullan
2017-12-14 08:21:36 +08:00