290 Commits

Author SHA1 Message Date
Seán Coffey
feaac05add Merge branch 'master' into 8044609-ssl 2024-11-18 19:32:21 +00:00
Patricio Chilano Mateo
78b80150e0 8338383: Implement JEP 491: Synchronize Virtual Threads without Pinning
Co-authored-by: Patricio Chilano Mateo <pchilanomate@openjdk.org>
Co-authored-by: Alan Bateman <alanb@openjdk.org>
Co-authored-by: Andrew Haley <aph@openjdk.org>
Co-authored-by: Fei Yang <fyang@openjdk.org>
Co-authored-by: Coleen Phillimore <coleenp@openjdk.org>
Co-authored-by: Richard Reingruber <rrich@openjdk.org>
Co-authored-by: Martin Doerr <mdoerr@openjdk.org>
Reviewed-by: aboldtch, dholmes, coleenp, fbredberg, dlong, sspitsyn
2024-11-12 15:23:48 +00:00
Seán Coffey
a11d50d55c keep expand option and add test coverage 2024-11-12 11:42:05 +00:00
Seán Coffey
a77e3c73d9 Merge branch 'master' into 8044609-ssl 2024-11-08 07:23:13 +00:00
Artur Barashev
8b4749713c 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server
Reviewed-by: wetmore, djelinski, xuelei
2024-11-04 18:46:38 +00:00
Seán Coffey
c44d524cee Merge branch 'master' into 8044609-ssl 2024-10-15 13:46:25 +00:00
Hai-May Chao
dadcee1b89 8307383: Enhance DTLS connections
Co-authored-by: Jamil Nimeh <jnimeh@openjdk.org>
Reviewed-by: rhalade, mschoene, ascarpino
2024-10-15 17:04:27 +05:30
Jamil Nimeh
b6e72ff971 8339403: sun.security.ssl.StatusResponseManager.get swallows interrupt status
Reviewed-by: valeriep
2024-10-03 17:16:31 +00:00
Seán Coffey
4effe97ff6 Remove pluggability help reference 2024-09-04 08:19:53 +00:00
Seán Coffey
902453c63d Merge branch 'master' into 8044609-ssl 2024-09-04 08:15:53 +00:00
Anthony Scarpino
0c2b175898 8328608: Multiple NewSessionTicket support for TLS
Reviewed-by: djelinski
2024-08-28 17:24:33 +00:00
Hai-May Chao
fd741a88e8 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
Reviewed-by: wetmore
2024-07-21 17:05:46 +00:00
Prajwal Kumaraswamy
1b9270ac8a 8328723: IP Address error when client enables HTTPS endpoint check on server socket
Reviewed-by: wetmore, djelinski
2024-07-18 22:42:34 +00:00
Seán Coffey
e7d42d4d3e Merge branch 'master' into 8044609-ssl 2024-07-15 12:49:33 +00:00
Anthony Scarpino
07bc523df8 8334670: SSLSocketOutputRecord buffer miscalculation
Reviewed-by: djelinski, ssahoo
2024-06-26 22:28:33 +00:00
nibjen
e681b4e9b3 8332524: Instead of printing "TLSv1.3," it is showing "TLS13"
Reviewed-by: mullan
2024-06-18 13:28:37 +00:00
Seán Coffey
1c4250ab49 all ssl mode only if ssl specified by itself 2024-05-23 13:39:12 +00:00
Seán Coffey
27178fb890 indentation 2024-04-26 15:10:26 +00:00
Seán Coffey
277583cd1d Allow ssl,<option> type syntax as currently done. Improve test case coverage 2024-04-17 14:07:53 +00:00
Seán Coffey
bc0d61073c Tighten up ssl parsing 2024-04-12 15:38:46 +00:00
Seán Coffey
d87c9748be Initial commit 2024-04-12 14:54:17 +00:00
Prasadrao Koppula
d44aaa37f9 8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message
Reviewed-by: djelinski, coffeys, jjiang, ascarpino
2024-03-22 07:02:37 +00:00
John Jiang
9059727df1 8327182: Move serverAlias into the loop
Reviewed-by: gli, mullan
2024-03-19 02:03:13 +00:00
Prajwal Kumaraswamy
bdd1aebea3 8312383: Log X509ExtendedKeyManager implementation class name in TLS/SSL connection
Reviewed-by: coffeys
2024-03-08 09:04:16 +00:00
Anthony Scarpino
f62b5789ad 8311644: Server should not send bad_certificate alert when the client does not send any certificates
Reviewed-by: djelinski, jjiang, ssahoo
2024-02-26 16:49:01 +00:00
Christoph Langer
c2d9fa26ce 8326000: Remove obsolete comments for class sun.security.ssl.SunJSSE
Reviewed-by: mbaesken, ascarpino
2024-02-18 06:58:22 +00:00
John Jiang
fe78c0f191 8325022: Incorrect error message on client authentication
Reviewed-by: jnimeh, hchao, djelinski
2024-02-01 02:35:34 +00:00
Ben Perez
c328f9589d 8296787: Unify debug printing format of X.509 cert serial numbers
Reviewed-by: mullan, coffeys
2023-12-14 17:57:36 +00:00
Hai-May Chao
a95062b39a 8319670: Improve comments describing system properties for TLS server and client for max chain length
Reviewed-by: mullan
2023-11-09 20:21:15 +00:00
Hai-May Chao
0064cf90ff 8311596: Add separate system properties for TLS server and client for maximum chain length
Reviewed-by: jnimeh, weijun, mullan
2023-10-31 15:22:18 +00:00
Jaikiran Pai
0259da9283 8301686: TLS 1.3 handshake fails if server_name doesn't match resuming session
Reviewed-by: djelinski, wetmore
2023-09-29 05:00:02 +00:00
Daniel Jeliński
fee9d3362c 8293176: SSLEngine handshaker does not send an alert after a bad parameters
Reviewed-by: mdonovan, jnimeh
2023-09-27 07:33:52 +00:00
John Jiang
2264667bba 8315422: getSoTimeout() would be in try block in SSLSocketImpl
Reviewed-by: jnimeh
2023-08-31 22:26:48 +00:00
Xue-Lei Andrew Fan
79be8d9383 8312259: StatusResponseManager unused code clean up
Reviewed-by: mpowers, jnimeh
2023-08-10 17:15:56 +00:00
Pavel Rappo
19ae62ae2c 8311170: Simplify and modernize equals and hashCode in security area
Reviewed-by: djelinski, rriggs, valeriep
2023-08-09 12:34:40 +00:00
Matthew Donovan
afcf8e4751 8290005: com/sun/jndi/ldap/LdapCBPropertiesTest.java failling with NullPointerException
Reviewed-by: jnimeh, xuelei
2023-07-17 11:16:19 +00:00
Kevin Driver
5667afc362 8295068: SSLEngine throws NPE parsing CertificateRequests
Reviewed-by: xuelei
2023-07-07 16:55:26 +00:00
Jaikiran Pai
db133dbc02 8310106: sun.security.ssl.SSLHandshake.getHandshakeProducer() incorrectly checks handshakeConsumers
Reviewed-by: wetmore, xuelei
2023-06-16 05:38:10 +00:00
Kevin Driver
80edd5c298 8294985: SSLEngine throws IAE during parsing of X500Principal
Reviewed-by: wetmore, xuelei, mullan
2023-06-09 23:31:12 +00:00
Weijun Wang
6b90b0519e 8297878: KEM: Implementation
Reviewed-by: ascarpino, mullan
2023-05-30 16:29:19 +00:00
Kevin Driver
197d0cc603 8294983: SSLEngine throws ClassCastException during handshake
Co-authored-by: Daniel Jeliński <djelinski@openjdk.org>
Reviewed-by: wetmore, xuelei
2023-05-04 19:25:01 +00:00
Jamil Nimeh
14aad787a8 8294474: Better AES support
Reviewed-by: ahgross, ascarpino
2023-04-18 23:21:20 +00:00
Matthew Donovan
39398075b7 8182621: JSSE should reject empty TLS plaintexts
Reviewed-by: xuelei
2023-04-11 04:21:17 +00:00
Sean Mullan
26b111d714 8301700: Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
Reviewed-by: xuelei
2023-02-15 13:25:50 +00:00
Jesper Wilhelmsson
fc9f8baf56 Merge 2023-01-18 23:29:12 +00:00
Valerie Peng
0f925fefdf 8295723: security/infra/wycheproof/RunWycheproof.java fails with Assertion Error
Reviewed-by: mschoene, ascarpino, coffeys, rhalade, weijun
2023-01-17 20:58:59 +00:00
Valerie Peng
6c5aefe60c 8293554: Enhanced DH Key Exchanges
Reviewed-by: rhalade, mschoene, ascarpino, weijun
2023-01-17 20:58:59 +00:00
Jamil Nimeh
2e8073e4f9 8287411: Enhance DTLS Performance
Reviewed-by: rhalade, ahgross, weijun, ascarpino
2023-01-17 20:58:58 +00:00
Volker Simonis
debe5879aa 8298381: Improve handling of session tickets for multiple SSLContexts
Reviewed-by: xuelei, ascarpino, serb
2023-01-10 11:49:36 +00:00
Xue-Lei Andrew Fan
5d4c71c8bd 8281236: (D)TLS key exchange named groups
Reviewed-by: mullan
2022-12-07 20:16:45 +00:00