54 Commits

Author SHA1 Message Date
Alex Blewitt
ebbce91e79 8264681: Use the blessed modifier order in java.security
Reviewed-by: mullan, shade
2021-04-14 06:01:00 +00:00
Weijun Wang
eb5c097b6d 8262389: Use permitted_enctypes if default_tkt_enctypes or default_tgs_enctypes is not present
Reviewed-by: mullan
2021-04-06 23:58:21 +00:00
Aleksey Shipilev
0638303316 8263497: Clean up sun.security.krb5.PrincipalName::toByteArray
Reviewed-by: weijun
2021-03-15 06:27:32 +00:00
Weijun Wang
ded96ddcde 8139348: Deprecate 3DES and RC4 in Kerberos
Reviewed-by: mullan
2021-02-25 18:49:05 +00:00
Weijun Wang
991f7c1303 8210373: Deadlock in libj2gss.so when loading "j2gss" and "net" libraries in parallel.
Reviewed-by: xuelei
2021-02-23 00:59:58 +00:00
Weijun Wang
59b8d595d2 8261481: Cannot read Kerberos settings in dynamic store on macOS Big Sur
Reviewed-by: mullan
2021-02-12 14:57:01 +00:00
Weijun Wang
4a8b5c1602 8257858: [macOS]: Remove JNF dependency from libosxsecurity/KeystoreImpl.m
8257860: [macOS]: Remove JNF dependency from libosxkrb5/SCDynamicStoreConfig.m

Reviewed-by: erikj, prr, ihse, valeriep
2021-02-03 16:20:16 +00:00
Jamil Nimeh
8554fe6ebc 8253866: Security Libs Terminology Refresh
Reviewed-by: erikj, weijun, mullan
2021-01-14 16:36:51 +00:00
Weijun Wang
9e463d1a88 8258631: Remove sun.security.jgss.krb5.Krb5Util.getSubject()
Reviewed-by: xuelei
2020-12-22 16:41:19 +00:00
Alexey Bakhtin
cfa3f74931 8245527: LDAP Channel Binding support for Java GSS/Kerberos
Reviewed-by: dfuchs, aefimov, mullan
2020-09-25 07:26:54 +00:00
Martin Balao
31753ef9bf 8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets
Reviewed-by: weijun
2020-07-25 01:02:51 -03:00
Mandy Chung
71d646a160 8235521: Replacement API for Unsafe::ensureClassInitialized
Reviewed-by: alanb, chegar, psandoz
2020-06-08 16:55:45 -07:00
Weijun Wang
6212aea580 8246193: Possible NPE in ENC-PA-REP search in AS-REQ
Reviewed-by: xuelei
2020-05-31 10:13:04 +08:00
Mikael Vidstedt
071bd521bc 8244224: Implementation of JEP 381: Remove the Solaris and SPARC Ports
Reviewed-by: alanb, bchristi, dcubed, dfuchs, eosterlund, erikj, glaubitz, ihse, iignatyev, jjiang, kbarrett, ksrini, kvn, naoto, prr, rriggs, serb, sspitsyn, stefank, tschatzl, valeriep, weijun, weijun
2020-05-20 17:33:37 -07:00
Valerie Peng
080b3b83eb 8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
Use sun.security.util.KnownOIDs enum instead of hardcoding oid strings everywhere

Reviewed-by: weijun
2020-05-19 04:05:03 +00:00
Martin Balao
2883bccf48 8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD
Reviewed-by: weijun
2020-03-28 19:41:10 -03:00
Henry Jen
0278846eaa Merge 2020-04-14 23:11:49 +00:00
Ivan Gerasimov
3790e58090 8241761: Typos: empty lines in javadoc, inconsistent indents, etc. (security-libs only)
Reviewed-by: weijun
2020-04-01 18:38:05 -07:00
Mikael Vidstedt
3318314c7c 8237589: Fix copyright header formatting
Reviewed-by: jjg, serb, iris, jwilhelm
2020-01-21 14:23:01 -08:00
Jesper Wilhelmsson
51d5164ca2 Merge 2020-01-16 04:09:50 +01:00
Weijun Wang
f4af0eadb6 8236405: Formatting issues in Kerberos debug output
Reviewed-by: mullan
2019-12-21 15:27:37 +08:00
Weijun Wang
f3815c85a1 8231139: Improved keystore support
Reviewed-by: mullan, ahgross
2019-10-09 17:42:38 +08:00
Weijun Wang
bda0fba56b 8229951: Better Ticket Granting Services
Reviewed-by: ahgross, valeriep
2019-09-26 18:12:53 +08:00
Martin Balao
4fa827ec92 8005819: Support cross-realm MSSFU
Reviewed-by: weijun
2019-12-11 15:43:42 -03:00
Ivan Gerasimov
8e859259bc 8233884: Avoid looking up standard charsets in security libraries
Reviewed-by: coffeys
2019-11-12 01:36:17 -08:00
Henry Jen
8d141f1048 Merge 2019-10-14 21:01:25 +00:00
Joe Darcy
8fe60f46d7 8231368: Suppress warnings on non-serializable non-transient instance fields in java.security.jgss
Reviewed-by: mullan, coffeys
2019-10-08 15:27:13 -07:00
Weijun Wang
12c278c3e3 8228659: Record which Java methods are called by native codes in JGSS and JAAS
Reviewed-by: mullan
2019-09-25 17:54:21 +08:00
Martin Balao
3cd50f2666 8227437: S4U2proxy cannot continue because server's TGT cannot be found
Reviewed-by: weijun
2019-07-17 12:26:56 -03:00
Weijun Wang
e133dbf7bd 8227381: GSS login fails with PREAUTH_FAILED
Reviewed-by: xuelei
2019-07-10 09:43:34 +08:00
Weijun Wang
17bc4c4bcf 8227305: Krb5Util::getTicketFromSubjectAndTgs is useless
Reviewed-by: xuelei
2019-07-06 08:11:19 +08:00
Weijun Wang
d678ba83dd 8226719: Kerberos login to Windows 2000 failed with "Inappropriate type of checksum in message"
Reviewed-by: xuelei
2019-07-03 11:43:01 +08:00
Weijun Wang
475996adc2 6722928: Support SSPI as a native GSS-API provider
Reviewed-by: erikj, nwilliams, valeriep
2019-06-13 10:06:07 +08:00
Martin Balao
5aae9ef0db 8215032: Support Kerberos cross-realm referrals (RFC 6806)
Reviewed-by: weijun
2019-06-05 01:42:11 -03:00
Weijun Wang
cb06712f5a 8220302: Better Kerberos ccache handling
Reviewed-by: valeriep
2019-04-19 10:22:20 +08:00
Nico Williams
58a340bcb1 8212217: JGSS: Don't dispose() of creds too eagerly
Reviewed-by: mullan, weijun
2018-11-01 22:41:32 +08:00
Mandy Chung
5e6d6b8642 8207146: Rename jdk.internal.misc.Unsafe::xxxObject to xxxReference
Reviewed-by: dholmes, thartmann
2018-10-22 17:00:04 -07:00
Weijun Wang
9452b88d93 8210821: Support dns_canonicalize_hostname in krb5.conf
Reviewed-by: valeriep
2018-10-02 16:02:35 +08:00
Weijun Wang
dcb930f123 8186186: GSSContext.isEstablished() can return true on error state
Reviewed-by: weijun
2018-08-21 20:19:46 -07:00
Weijun Wang
33a96c6df9 8209416: Refactoring GetPropertyAction calls in security libs
Reviewed-by: xuelei, rriggs
2018-08-14 22:39:34 +08:00
Xue-Lei Andrew Fan
87c6761704 8196584: TLS 1.3 Implementation
Co-authored-by: Adam Petcher <adam.petcher@oracle.com>
Co-authored-by: Amanda Jiang <amanda.jiang@oracle.com>
Co-authored-by: Anthony Scarpino <anthony.scarpino@oracle.com>
Co-authored-by: Bradford Wetmore <bradford.wetmore@oracle.com>
Co-authored-by: Jamil Nimeh <jamil.j.nimeh@oracle.com>
Co-authored-by: John Jiang <sha.jiang@oracle.com>
Co-authored-by: Rajan Halade <rajan.halade@oracle.com>
Co-authored-by: Sibabrata Sahoo <sibabrata.sahoo@oracle.com>
Co-authored-by: Valerie Peng <valerie.peng@oracle.com>
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: ascarpino, coffeys, dfuchs, jjiang, jnimeh, mullan, rhalade, ssahoo, valeriep, weijun, wetmore, xuelei
2018-06-25 13:41:39 -07:00
Prasadrao Koppula
b3e5409c1d 8187218: GSSCredential.getRemainingLifetime() returns negative value for TTL > 24 days
Co-authored-by: Weijun Wang <weijun.wang@oracle.com>
Reviewed-by: mullan
2018-03-20 11:16:10 +05:30
Jan Kalina
4e86e3720b 8194073: Invalid SunNativeProvider.INSTANCE initialization
Changed to always construct INSTANCE after MECH_MAP

Reviewed-by: valeriep
2018-06-11 19:39:05 +00:00
Weijun Wang
154849b1c5 8072996: Deprecate stream-based GSSContext methods
Reviewed-by: mullan
2018-05-30 22:24:20 +08:00
Weijun Wang
48b5731c39 8201627: Kerberos sequence number issues
Reviewed-by: valeriep
2018-05-19 22:06:47 +08:00
Weijun Wang
b8855ebbc2 8201867: Kerberos keytabs with holes in certain places are parsed incorrectly
Reviewed-by: valeriep
2018-05-18 16:27:15 +08:00
Weijun Wang
0b6fbf50d2 8200468: Port the native GSS-API bridge to Windows
Reviewed-by: ihse, valeriep
2018-04-13 15:29:33 +08:00
Weijun Wang
370977cf4f 8200152: KerberosString should use UTF-8 by default
Reviewed-by: xuelei
2018-04-10 11:02:09 +08:00
Weijun Wang
5d3e5d9275 8197518: Kerberos krb5 authentication: AuthList's put method leads to performance issue
Reviewed-by: coffeys, xuelei
2018-02-26 08:30:30 +08:00
Weijun Wang
15ac25be9d 8177398: Exclude dot files ending with .conf from krb5.conf's includedir
Reviewed-by: mullan
2018-01-26 09:37:10 +08:00