1592 Commits

Author SHA1 Message Date
Daniel Gredler
f46a698113 8381015: CharsetEncoder.canEncode(CharSequence) is slow for UTF-8, UTF-16, UTF-32
Reviewed-by: naoto, vyazici
2026-03-31 21:46:05 +00:00
Koushik Thirupattur
7e0a1499ee 8345954: Revisit Class Initializers and Locking in X509TrustManagerImpl
Reviewed-by: weijun
2026-03-30 12:50:42 +00:00
Hai-May Chao
cf424480f4 8375275: Error handling to raise illegal_parameter or internal_error alert in hybrid key exchange
Reviewed-by: wetmore, mpowers
2026-03-25 15:29:34 +00:00
Hai-May Chao
cdd64dbb5d 8379433: Throwing proper exception for invalid encapsulation length in Hybrid
Reviewed-by: weijun
2026-03-19 19:12:27 +00:00
Shawn Emery
fdb129ad94 8378893: X25519 should utilize a larger limb size
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: ascarpino, bperez
2026-03-13 16:34:30 +00:00
Ben Perez
e9446e1554 8368841: X25519 implementation differs from the specification in RFC 7748
Reviewed-by: ascarpino, semery
2026-03-13 15:02:02 +00:00
Weijun Wang
375f821627 8379515: draft-ietf-lamps-kyber-certificates is now RFC 9935
Reviewed-by: mullan
2026-03-09 13:54:11 +00:00
Artur Barashev
b349f661ea 8379191: SunX509KeyManagerImpl alias chooser methods returns null for EC_EC
Reviewed-by: myankelevich, mullan
2026-03-06 14:27:53 +00:00
Sean Coffey
93fe49abef 8371333: Optimize static initialization of SSLContextImpl classes and improve logging
Reviewed-by: hchao, jnimeh
2026-02-25 12:57:30 +00:00
Brian Burkhalter
3b0160f50f 8378115: (fs) sun.nio.fs.NativeBuffer no longer needs a cleaner
Reviewed-by: alanb
2026-02-23 18:09:31 +00:00
Jaikiran Pai
e8dadf4baa 8378003: JarURLConnection.getCertificates() and getCodeSigners() incorrectly return null for signed JAR files after JDK-8377338
Reviewed-by: mullan, dfuchs
2026-02-20 15:13:07 +00:00
Sean Coffey
c988a4e534 8044609: javax.net.debug options not working and documented as expected
Reviewed-by: wetmore
2026-02-12 09:45:59 +00:00
Jaikiran Pai
3a588e5bed 8377338: URLJarFile$URLJarFileEntry need not clone the arrays returned by getCertificates() and getCodeSigners()
Reviewed-by: mullan
2026-02-11 02:11:56 +00:00
Daniel Jeliński
d97ea5a8cd 8377549: [BACKOUT] Need to keep leading zeros in TlsPremasterSecret of TLS1.3 DHKeyAgreement
Reviewed-by: mullan
2026-02-10 14:48:52 +00:00
Mikhail Yankelevich
264fdc5b4e 8374808: Add new methods to KeyStore and KeyStoreSpi that return the creation date as an Instant instead of Date
Reviewed-by: weijun
2026-02-10 12:18:03 +00:00
Alan Bateman
cd5256d5a6 8374170: I/O Poller updates
Reviewed-by: michaelm
2026-02-06 15:19:01 +00:00
Damon Fenacci
bfd5bdaf7f 8374582: [REDO] Move input validation checks to Java for java.lang.StringCoding intrinsics
Co-authored-by: Volkan Yazici <vyazici@openjdk.org>
Reviewed-by: chagedorn, thartmann, vyazici
2026-02-06 07:44:25 +00:00
Daniel Fuchs
d7523ec8d2 8376031: HttpsURLConnection.getServerCertificates() throws "java.lang.IllegalStateException: connection not yet open" for the HEAD method
Reviewed-by: jpai
2026-02-04 10:13:41 +00:00
Weijun Wang
e51ccef9cb 8347938: Add Support for the Latest ML-KEM and ML-DSA Private Key Encodings
Reviewed-by: mullan, bperez, mpowers
2026-02-03 16:32:21 +00:00
Daniel Gredler
992a8ef46b 8376226: CharsetEncoder.canEncode(CharSequence) is much slower than necessary
Reviewed-by: alanb, naoto
2026-01-27 13:20:26 +00:00
Valerie Peng
e55124041e 8375549: ConcurrentModificationException if jdk.crypto.disabledAlgorithms has multiple entries with known oid
Reviewed-by: mullan, coffeys
2026-01-23 19:46:40 +00:00
Daniel Jeliński
25d2b52ab9 8328046: Need to keep leading zeros in TlsPremasterSecret of TLS1.3 DHKeyAgreement
Reviewed-by: hchao
2026-01-22 21:48:28 +00:00
Hai-May Chao
96a2649e29 8373408: SHA1withECDSA is not required for ECDHE and ECDSA
Reviewed-by: djelinski, ascarpino
2026-01-22 17:41:00 +00:00
Artur Barashev
025041ba04 8370885: Default namedGroups values are not being filtered against algorithm constraints
Reviewed-by: hchao
2026-01-22 13:11:42 +00:00
Brent Christian
e25a5a4821 Merge
Reviewed-by: kcr, prr, smarks
2026-01-21 01:28:38 +00:00
Hai-May Chao
21dc41f744 8314323: Implement JEP 527: TLS 1.3 Hybrid Key Exchange
Co-authored-by: Jamil Nimeh <jnimeh@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Reviewed-by: wetmore, mullan
2026-01-20 16:16:38 +00:00
Jamil Nimeh
07f981f6b0 8368032: Enhance Certificate Checking
Reviewed-by: ahgross, coffeys, rhalade, mullan, abarashev
2026-01-18 20:22:55 -08:00
Hai-May Chao
a1b039aa98 8286032: keytool -list -alias should not assume it is always a certificate
Reviewed-by: weijun
2026-01-15 22:33:34 +00:00
Artur Barashev
78a106ffbb 8375183: Remove unused SSLConfiguration.maximumProtocolVersion variable
Reviewed-by: djelinski, myankelevich, hchao
2026-01-15 13:18:20 +00:00
John Jiang
a726e834b6 8373231: ECDSAOperations::toAffinePoint is redundant
Reviewed-by: mullan
2026-01-10 00:52:34 +00:00
Mark Powers
92abc6dfe4 8369282: Distrust TLS server certificates anchored by Chunghwa ePKI Root CA
Reviewed-by: mullan
2026-01-08 17:35:43 +00:00
Volkan Yazici
7e18de137c 8374210: [BACKOUT] Move input validation checks to Java for java.lang.StringCoding intrinsics
Reviewed-by: shade, thartmann
2026-01-07 09:22:38 +00:00
Weijun Wang
fbc59ac0a1 8374555: No need for visible input warning in s.s.u.Password when not reading from System.in
Reviewed-by: coffeys, hchao
2026-01-06 18:05:27 +00:00
Fernando Guallini
532a0a65b1 8372950: Pem.pemEncoded should cache the Pattern
Reviewed-by: ascarpino
2026-01-06 10:53:27 +00:00
Artur Barashev
3439512401 8374317: Change GCM IV size to 12 bytes when encrypting/decrypting TLS session ticket
Reviewed-by: djelinski, mpowers, ascarpino
2026-01-02 13:28:15 +00:00
Sergey Bylokhov
2d1be8a9e6 8374391: Update the copyright year to 2025 in the remaining files under src/ where it was missed
Reviewed-by: aivanov
2025-12-31 17:15:34 +00:00
Sergey Bylokhov
36d2c277c4 8374327: Update copyright year to 2025 for files in java.base added/updated by commits in 2025
Reviewed-by: jpai
2025-12-31 09:13:32 +00:00
Ioi Lam
232b41b222 8373392: Replace CDS object subgraphs with @AOTSafeClassInitializer
Reviewed-by: liach, heidinga
2025-12-17 22:16:38 +00:00
Damon Nguyen
fb99ba6ccd 8373119: JDK 26 RDP1 L10n resource files update
Reviewed-by: jlu, asemenyuk, almatvee
2025-12-16 21:19:33 +00:00
Daniel Jeliński
895232fc65 8372731: Detailed authentication failure messages
Reviewed-by: dfuchs, michaelm
2025-12-15 08:40:05 +00:00
Ferenc Rakoczi
6ec36d348b 8373059: Test sun/security/provider/acvp/ML_DSA_Intrinsic_Test.java should pass on Aarch64
Reviewed-by: weijun, vpaprotski
2025-12-12 16:04:56 +00:00
Artur Barashev
a99f340e1b 8371721: Refactor checkTrusted methods in X509TrustManagerImpl
Reviewed-by: coffeys, djelinski
2025-12-12 14:39:42 +00:00
Brian Burkhalter
74dca863c2 8371718: (sc) Channels.new{Input,Output}Stream can allocate unbounded memory for a socket channel
Reviewed-by: alanb
2025-12-10 22:46:35 +00:00
Naoto Sato
b2daf9de30 8355522: Remove the java.locale.useOldISOCodes system property
Reviewed-by: jlu, joehw
2025-12-09 18:21:12 +00:00
Sergey Chernyshev
7da91533aa 8369950: TLS connection to IPv6 address fails with BCJSSE due to IllegalArgumentException
Co-authored-by: Mikhail Yankelevich <myankelevich@openjdk.org>
Reviewed-by: djelinski, vyazici, dfuchs, myankelevich
2025-12-08 09:06:21 +00:00
Alan Bateman
afb6a0c2fe 8372958: SocketInputStream.read throws SocketException instead of returning -1 when input shutdown
Reviewed-by: djelinski, michaelm
2025-12-03 13:03:51 +00:00
Per Minborg
7278d2e8e5 8372258: Improve TypeVariable support
Reviewed-by: liach
2025-12-02 09:39:29 +00:00
Hai-May Chao
c2ea75b81f 8353749: Improve security warning when using JKS or JCEKS keystores
Reviewed-by: weijun
2025-11-21 01:10:35 +00:00
Chen Liang
d887359b5a 8370976: Review the behavioral changes of core reflection descriptor parsing migration
Reviewed-by: rriggs, jvernee
2025-11-21 00:38:44 +00:00
Weijun Wang
45a2fd37f0 8325448: Hybrid Public Key Encryption
Reviewed-by: mullan, ascarpino, abarashev
2025-11-20 15:15:41 +00:00