41 Commits

Author SHA1 Message Date
Anthony Scarpino
0b83fc0150 8235710: Remove the legacy elliptic curves
Reviewed-by: xuelei, erikj
2020-09-25 02:40:36 +00:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Hai-May Chao
f04a7e5cb4 8172404: Tools should warn if weak algorithms are used before restricting them
Reviewed-by: mullan, weijun
2020-04-17 20:11:39 +08:00
Martin Balao
1c651455a7 8241888: Mirror jdk.security.allowNonCaAnchor system property with a security one
Reviewed-by: mullan
2020-04-02 18:18:23 -03:00
Sean Mullan
fb37c54630 8238560: Cleanup and consolidate algorithms in the jdk.tls.legacyAlgorithms security property
Reviewed-by: xuelei
2020-02-20 16:36:38 -05:00
Sean Mullan
2fbbce2b23 8191395: policy.allowSystemProperty and policy.expandProperties also apply to JAAS configurations
Reviewed-by: weijun
2020-02-12 10:28:59 -05:00
Anthony Scarpino
ca112043f1 8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR
Reviewed-by: mullan, xuelei, weijun
2019-12-18 12:10:09 -08:00
Sean Mullan
dd321330ce 8234870: Deprecate the OracleUcrypto JCE Provider for removal
Reviewed-by: alanb, rriggs
2019-12-11 17:17:28 -05:00
Martin Balao
0e5a288dfe 8233404: System property to set the number of PBE iterations in JCEKS keystores
Reviewed-by: weijun
2019-11-12 00:30:55 -03:00
Weijun Wang
9eb755e85e 8209901: Canonical file handling
Reviewed-by: mullan, alanb, ahgross
2019-04-22 13:01:57 +08:00
Weijun Wang
cb06712f5a 8220302: Better Kerberos ccache handling
Reviewed-by: valeriep
2019-04-19 10:22:20 +08:00
Weijun Wang
ca919052e9 8229767: Typo in java.security: Sasl.createClient and Sasl.createServer
Reviewed-by: xuelei
2019-08-15 15:39:43 +08:00
Xue-Lei Andrew Fan
316140ff92 8226374: Restrict TLS signature schemes and named groups
Reviewed-by: mullan
2019-08-12 21:36:29 -07:00
Martin Balao
5aae9ef0db 8215032: Support Kerberos cross-realm referrals (RFC 6806)
Reviewed-by: weijun
2019-06-05 01:42:11 -03:00
Lance Andersen
2c002e9355 8224682: Remove the com.sun.CORBA.ORBIorTypeCheckRegistryFilter security property
Reviewed-by: bchristi
2019-05-24 15:06:58 -04:00
Weijun Wang
31af27a1ee 8200400: Restrict Sasl mechanisms
Reviewed-by: mullan
2019-05-10 09:39:49 +08:00
Jesper Wilhelmsson
bc920bd00d Merge 2019-01-22 19:56:19 +01:00
Sean Mullan
c9bea6a8ea 8216280: Allow later Symantec Policy distrust date for two Apple SubCAs
Reviewed-by: coffeys
2019-01-22 09:27:19 -05:00
Jesper Wilhelmsson
a8c5f1e59a Merge 2019-01-15 22:54:09 +01:00
Roger Riggs
0ec2218c50 8202675: Replace process-wide terminology in serial filtering to be consistent
Reviewed-by: alanb, lancea
2019-01-15 15:56:41 -05:00
Henry Jen
d77f96b0b2 Merge 2018-12-13 11:47:35 -08:00
Weijun Wang
9136c7d1d0 8076190: Customizing the generation of a PKCS12 keystore
Reviewed-by: mullan
2018-12-13 11:16:33 +08:00
Sean Mullan
dfd58a59ff 8207258: Distrust TLS server certificates anchored by Symantec Root CAs
Reviewed-by: weijun
2018-12-11 13:22:20 -05:00
Roger Riggs
48d68d182a 8214014: Remove vestiges of gopher: protocol proxy support
Reviewed-by: lancea, alanb
2018-11-28 16:04:36 -05:00
Michael McMahon
ef75339a1e 8209094: Improve web server connections
Reviewed-by: chegar, dfuchs, mschoene, igerasim
2018-10-05 08:54:10 +01:00
Michael McMahon
028f2e14b3 8213189: Make restricted headers in HTTP Client configurable and remove Date by default
Reviewed-by: dfuchs
2018-11-14 14:23:21 +00:00
Sean Mullan
7727e4ca2f 8211883: Disable anon and NULL cipher suites
Reviewed-by: jnimeh
2018-10-25 13:55:28 -04:00
Matthias Baesken
be56cc5bf3 8207768: Improve exception messages during manifest parsing of jar archives
Reviewed-by: clanger, mullan, weijun
2018-09-12 11:13:09 +02:00
Jamil Nimeh
8eb45613db 8208350: Disable all DES cipher suites
Reviewed-by: xuelei, mullan
2018-08-20 15:37:47 -07:00
Sean Mullan
ac3d4a6722 8208691: Tighten up jdk.includeInExceptions security property
Add stronger warning on usage and add test to check that property is not set

Reviewed-by: alanb, rriggs
2018-08-07 10:29:01 -04:00
Chris Hegarty
1b1355c222 8207846: Generalize the jdk.net.includeInExceptions security property
Reviewed-by: alanb, michaelm, rriggs, mullan
2018-07-25 10:08:39 +01:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Michael McMahon
1d79d38007 8204233: Add configurable option for enhanced socket IOException messages
Reviewed-by: alanb, chegar
2018-06-22 18:10:20 +01:00
Ivan Gerasimov
97c8fdb2dd 8175075: Add 3DES to the default disabled algorithm security property
Reviewed-by: xuelei, mullan, rhalade
2018-01-19 11:24:39 -08:00
Weijun Wang
8fb70c710a 8189997: Enhance keystore mechanisms
8194259: keytool error: java.io.IOException: Invalid secret key format

Reviewed-by: mullan, valeriep, rriggs, ahgross
2018-01-12 08:06:24 +08:00
Sean Mullan
4ea3d766b6 8186032: Disable XML Signatures signed with EC keys less than 224 bits
Reviewed-by: weijun, rhalade
2017-12-15 10:42:25 -05:00
Lana Steuck
8f528fba93 Merge 2018-01-18 18:58:46 +00:00
Bradford Wetmore
6b802a9513 8190229: Non-ASCII characters in java.security file after 8186093
Reviewed-by: weijun
2018-01-17 18:26:05 -08:00
Xue-Lei Andrew Fan
b657cda289 8163237: Restrict the use of EXPORT cipher suites
Reviewed-by: mullan, igerasim, rhalade, jnimeh
2017-10-31 00:54:53 +00:00
Erik Joelsson
3789983e89 8187443: Forest Consolidation: Move files to unified layout
Reviewed-by: darcy, ihse
2017-09-12 19:03:39 +02:00
Mark Sheppard
979cec24f8 8160104: CORBA communication improvements
Reviewed-by: rriggs, dfuchs
2017-09-03 16:08:13 +01:00