779 Commits

Author SHA1 Message Date
Justin Lu
fd0207d593 8345327: JDK 24 RDP1 L10n resource files update
Reviewed-by: naoto, dnguyen, joehw, almatvee, sgehwolf, jlahoda, prappo, asemenyuk
2024-12-16 21:00:56 +00:00
Archie Cobbs
4b21fb9df9 8343467: Remove unnecessary @SuppressWarnings annotations (security)
Reviewed-by: mullan
2024-12-13 22:40:42 +00:00
Magnus Ihse Bursie
ddf0461788 8345799: Update copyright year to 2024 for core-libs in files where it was missed
Reviewed-by: joehw, jlu, mli, lancea, kevinw
2024-12-11 21:08:22 +00:00
Kevin Driver
4c39e9faa0 8344924: Default CA certificates loaded despite request to use custom keystore
Reviewed-by: ascarpino
2024-12-10 20:49:13 +00:00
Weijun Wang
ca46c3a5ba 8343622: AesDkCrypto.stringToKey should not return null
Reviewed-by: valeriep
2024-12-05 08:36:18 +00:00
Weijun Wang
fb95a53944 8345533: Switch ML-DSA implementation to FIPS 204 final
Reviewed-by: bperez, jnimeh
2024-12-05 01:27:10 +00:00
Ben Perez
f904480a49 8345512: Remove wrapper functions for intrinsics in PQC algorithms
Reviewed-by: weijun
2024-12-04 22:01:10 +00:00
Roger Riggs
fcf185c8b4 8345325: SM cleanup of GetPropertyAction in java.base
Reviewed-by: alanb, lancea, naoto, mchung
2024-12-03 14:59:30 +00:00
Sean Mullan
940aa7c4cf 8344397: Remove Security Manager dependencies from java.security and sun.security packages
Reviewed-by: rriggs, hchao, weijun, alanb
2024-12-02 21:30:53 +00:00
Sean Mullan
30b8bbe255 8345060: Remove Security Manager dependencies from java.security.KeyStore and Identity APIs and implementations
Reviewed-by: hchao, alanb, weijun
2024-12-02 15:23:47 +00:00
Aleksei Efimov
959fa4a1a3 8344299: SM cleanup in javax.naming modules
Reviewed-by: alanb, dfuchs
2024-11-28 17:43:27 +00:00
Sean Mullan
c5de307284 8344992: Remove Security Manager dependencies from java.security.cert API and implementations
Reviewed-by: rriggs, hchao
2024-11-26 18:40:52 +00:00
Per Minborg
fc2da15bce 8344419: Use StaticProperty in some JDK classes
Reviewed-by: alanb, rriggs
2024-11-26 12:07:26 +00:00
Sean Mullan
ddc8a9d5da 8344366: Remove Security Manager dependencies from javax.net.ssl and sun.security.ssl packages
Reviewed-by: coffeys, ascarpino, hchao
2024-11-25 13:10:59 +00:00
Ben Perez
8b98f958dc 8298387: Implement JEP 497: Quantum-Resistant Module-Lattice-Based Digital Signature Algorithm
Reviewed-by: jnimeh
2024-11-22 17:48:08 +00:00
Ben Perez
13987b4244 8298390: Implement JEP 496: Quantum-Resistant Module-Lattice-Based Key Encapsulation Mechanism
Co-authored-by: Ferenc Rakoczi <ferenc.r.rakoczi@oracle.com>
Reviewed-by: valeriep
2024-11-22 16:36:52 +00:00
Andrey Turbanov
78602be1fe 8344024: Unnecessary Hashtable usage in RSAPSSSignature.DIGEST_LENGTHS
Reviewed-by: valeriep
2024-11-19 16:59:06 +00:00
Jaikiran Pai
a91d4c022f 8344233: Remove calls to SecurityManager and doPrivileged in java.net.ProxySelector and sun.net.spi.DefaultProxySelector after JEP 486 integration
Reviewed-by: dfuchs
2024-11-16 11:39:20 +00:00
Eirik Bjørsnøs
73fd8919f5 8344216: Remove calls to SecurityManager and and doPrivileged in java.net.Authenticator, java.net.CookieHandler, and java.net.ResponseCache after JEP 486 integration
Reviewed-by: dfuchs
2024-11-15 19:21:30 +00:00
Artur Barashev
697f27c5d5 8341964: Add mechanism to disable different parts of TLS cipher suite
Reviewed-by: mullan, ascarpino
2024-11-14 17:44:13 +00:00
Sean Mullan
db85090553 8338411: Implement JEP 486: Permanently Disable the Security Manager
Co-authored-by: Sean Mullan <mullan@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Aleksei Efimov <aefimov@openjdk.org>
Co-authored-by: Brian Burkhalter <bpb@openjdk.org>
Co-authored-by: Daniel Fuchs <dfuchs@openjdk.org>
Co-authored-by: Harshitha Onkar <honkar@openjdk.org>
Co-authored-by: Joe Wang <joehw@openjdk.org>
Co-authored-by: Jorn Vernee <jvernee@openjdk.org>
Co-authored-by: Justin Lu <jlu@openjdk.org>
Co-authored-by: Kevin Walls <kevinw@openjdk.org>
Co-authored-by: Lance Andersen <lancea@openjdk.org>
Co-authored-by: Naoto Sato <naoto@openjdk.org>
Co-authored-by: Roger Riggs <rriggs@openjdk.org>
Co-authored-by: Brent Christian <bchristi@openjdk.org>
Co-authored-by: Stuart Marks <smarks@openjdk.org>
Co-authored-by: Ian Graves <igraves@openjdk.org>
Co-authored-by: Phil Race <prr@openjdk.org>
Co-authored-by: Erik Gahlin <egahlin@openjdk.org>
Co-authored-by: Jaikiran Pai <jpai@openjdk.org>
Reviewed-by: kevinw, aivanov, rriggs, lancea, coffeys, dfuchs, ihse, erikj, cjplummer, coleenp, naoto, mchung, prr, weijun, joehw, azvegint, psadhukhan, bchristi, sundar, attila
2024-11-12 17:16:15 +00:00
Patricio Chilano Mateo
78b80150e0 8338383: Implement JEP 491: Synchronize Virtual Threads without Pinning
Co-authored-by: Patricio Chilano Mateo <pchilanomate@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Andrew Haley <aph@openjdk.org>
Co-authored-by: Fei Yang <fyang@openjdk.org>
Co-authored-by: Coleen Phillimore <coleenp@openjdk.org>
Co-authored-by: Richard Reingruber <rrich@openjdk.org>
Co-authored-by: Martin Doerr <mdoerr@openjdk.org>
Reviewed-by: aboldtch, dholmes, coleenp, fbredberg, dlong, sspitsyn
2024-11-12 15:23:48 +00:00
Kevin Driver
2a1ae0ff89 8331008: Implement JEP 478: Key Derivation Function API (Preview)
Co-authored-by: Rajan Halade <rhalade@openjdk.org>
Co-authored-by: Weijun Wang <weijun@openjdk.org>
Co-authored-by: Valerie Peng <valeriep@openjdk.org>
Reviewed-by: weijun, valeriep
2024-11-05 21:07:52 +00:00
Artur Barashev
8b4749713c 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server
Reviewed-by: wetmore, djelinski, xuelei
2024-11-04 18:46:38 +00:00
Ferenc Rakoczi
9cfb0f7f7a 8341527: AVX-512 intrinsic for SHA3
Reviewed-by: sviswanathan
2024-10-29 15:18:24 +00:00
Mark Powers
ca1700b8bf 8336665: CCE in X509CRLImpl$TBSCertList.getCertIssuer
Reviewed-by: mullan
2024-10-24 23:09:45 +00:00
Hai-May Chao
dadcee1b89 8307383: Enhance DTLS connections
Co-authored-by: Jamil Nimeh <jnimeh@openjdk.org>
Reviewed-by: rhalade, mschoene, ascarpino
2024-10-15 17:04:27 +05:30
Valerie Peng
369c573383 8302111: Serialization considerations
Reviewed-by: skoivu, rhalade, weijun, wetmore
2024-10-15 17:04:27 +05:30
Weijun Wang
3f53d57134 8340327: A common framework to support public key algorithms with standard parameter sets
Reviewed-by: ascarpino, mullan
2024-10-11 21:16:41 +00:00
Jamil Nimeh
b6e72ff971 8339403: sun.security.ssl.StatusResponseManager.get swallows interrupt status
Reviewed-by: valeriep
2024-10-03 17:16:31 +00:00
Eirik Bjørsnøs
0f381137cb 8341243: Use ArraySupport.SOFT_MAX_ARRAY_LENGTH for max array size in java.base
Reviewed-by: jpai, smarks
2024-10-02 01:27:03 +00:00
Rajan Halade
f554c3ffce 8341059: Change Entrust TLS distrust date to November 12, 2024
Reviewed-by: mullan
2024-09-27 17:16:13 +00:00
Francisco Ferrari Bihurriet
c6f1d5f374 8319332: Security properties files inclusion
Co-authored-by: Francisco Ferrari Bihurriet <fferrari@openjdk.org>
Co-authored-by: Martin Balao <mbalao@openjdk.org>
Reviewed-by: weijun, mullan, kdriver
2024-09-23 17:45:38 +00:00
Prasadrao Koppula
c9bee173d6 8331391: Enhance the keytool code by invoking the buildTrustedCerts method for essential options
Reviewed-by: coffeys, mullan
2024-09-19 13:21:08 +00:00
Jaikiran Pai
1d39249231 8339834: Replace usages of -mx and -ms in some tests
Reviewed-by: aivanov, ascarpino, prr, dholmes
2024-09-12 02:02:14 +00:00
Ferenc Rakoczi
c54fc08aa3 8338587: Internal XOF Methods for SHAKE128 and SHAKE256
Reviewed-by: valeriep, weijun
2024-09-09 13:49:34 +00:00
Hai-May Chao
8fb8cd85b7 8339347: keytool -importpass insists prompting the user even if there is no terminal
Reviewed-by: weijun
2024-09-05 20:17:52 +00:00
Mark Powers
bbb516163d 8337664: Distrust TLS server certificates issued after Oct 2024 and anchored by Entrust Root CAs
Reviewed-by: mullan, rhalade
2024-09-03 19:55:58 +00:00
Anthony Scarpino
0c2b175898 8328608: Multiple NewSessionTicket support for TLS
Reviewed-by: djelinski
2024-08-28 17:24:33 +00:00
Weijun Wang
b5b5a5b8e5 8336667: IAE in DerInputStream.toByteArray
Reviewed-by: valeriep
2024-07-25 17:11:59 +00:00
Ben Perez
4c91d5cb41 8322133: getParameterSpec(ECGenParameterSpec.class) on EC AlgorithmParameters does not return standard names
Reviewed-by: mullan
2024-07-23 19:35:11 +00:00
Hai-May Chao
fd741a88e8 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
Reviewed-by: wetmore
2024-07-21 17:05:46 +00:00
Prajwal Kumaraswamy
1b9270ac8a 8328723: IP Address error when client enables HTTPS endpoint check on server socket
Reviewed-by: wetmore, djelinski
2024-07-18 22:42:34 +00:00
Anthony Scarpino
07bc523df8 8334670: SSLSocketOutputRecord buffer miscalculation
Reviewed-by: djelinski, ssahoo
2024-06-26 22:28:33 +00:00
Volodymyr Paprotski
f101e153ce 8333583: Crypto-XDH.generateSecret regression after JDK-8329538
Reviewed-by: sviswanathan, kvn, ascarpino
2024-06-25 22:31:39 +00:00
Ferenc Rakoczi
75bea280b9 8333867: SHA3 performance can be improved
Reviewed-by: kvn, valeriep
2024-06-21 14:16:23 +00:00
nibjen
e681b4e9b3 8332524: Instead of printing "TLSv1.3," it is showing "TLS13"
Reviewed-by: mullan
2024-06-18 13:28:37 +00:00
John Jiang
c0ce7d871f 8333046: Clean codes in sun.security.util.math
Reviewed-by: weijun
2024-06-01 05:58:00 +00:00
Pavel Rappo
3cff588a31 8332826: Make hashCode methods in ArraysSupport friendlier
Reviewed-by: redestad, liach
2024-05-30 09:33:30 +00:00
Volodymyr Paprotski
afed7d0b05 8329538: Accelerate P256 on x86_64 using Montgomery intrinsic
Reviewed-by: ihse, ascarpino, sviswanathan
2024-05-22 16:27:27 +00:00