Commit Graph

758 Commits

Author SHA1 Message Date
Andrew John Hughes 5b41818ac6 8220641: [TESTBUG] New test KdcPolicy.java introduced by JDK-8164656 needs same change as JDK-8190690
Add -Dsun.net.spi.nameservice.provider.1=ns,mock to KdcPolicy.java @run calls

Reviewed-by: shade
2019-03-20 17:07:28 +00:00
Weijun Wang fc9578072a 8175120: Remove old tests on kdc timeout policy
Reviewed-by: xuelei, shade
2019-03-15 04:47:18 +00:00
Weijun Wang 2e178a6d39 8164656: krb5 does not retry if TCP connection timeouts
Reviewed-by: xuelei
2016-08-24 13:32:00 +08:00
Sean Mullan 68e393c051 8207258: Distrust TLS server certificates anchored by Symantec Root CAs
Add class CADistrustPolicy and distrust Symantec.

Reviewed-by: weijun
2019-03-01 00:55:45 +00:00
Paul Hohensee fd2ac91462 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883
Terminate cipher lists with TLS_EMPTY_RENEGOTIATION_INFO_SCSV.

Reviewed-by: jnimeh, clanger
2019-02-22 17:45:01 +00:00
Sean Coffey e7b982096a 8213952: Relax DNSName restriction as per RFC 1123
Reviewed-by: weijun, mullan, chegar
2018-12-05 17:33:01 +00:00
Andrew John Hughes 98a6ba2561 Merge 2019-02-06 04:09:08 +00:00
Aleksei Efimov f701a59174 Merge 2018-11-12 23:44:13 +00:00
Aleksei Efimov 17d11040e8 Merge 2018-11-08 18:48:19 +00:00
Martin Balao 6f136c53bc 8029661: Support TLS v1.2 algorithm in SunPKCS11 provider
TLS v1.2 algorithms for key and MAC derivation added to SunPKCS11 crypto provider. 8210912 fix is included as part of this changeset.

Reviewed-by: valeriep
2018-10-31 17:04:47 -03:00
Ivan Gerasimov 24d86358ea 8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed due to libnss3 version cannot be parsed
Improves the approach on parsing lib version

Reviewed-by: weijun, xuelei
2018-10-23 11:29:55 -07:00
Ivan Gerasimov 6182c473d6 8194864: Outputs more details for PKCS11 tests if the NSS lib version cannot be determined
It outputs the lib content if the lib version cannot be parsed

Reviewed-by: xuelei
2018-10-23 11:29:39 -07:00
Paul Hohensee 3b4e9b16df 8129560: TestKeyPairGenerator.java fails on Solaris because private exponent needs to comply with FIPS 186-4
Replace BigInteger.valueof(3) with RSAKeyGenParameterSpec.F4

Reviewed-by: coffeys
2018-10-22 15:20:49 +00:00
Aleksei Efimov 6b9230f05c Merge 2018-10-15 15:05:59 +01:00
Prasadrao Koppula 39c1549588 8211883: Disable anon and NULL cipher suites
Reviewed-by: mullan, coffeys
2018-10-30 11:06:28 +05:30
Ivan Gerasimov e04599aa4a 8191438: jarsigner should print when a timestamp will expire
8027781: New jarsigner timestamp warning is grammatically incorrect
8159805: sun/security/tools/jarsigner/warnings/NoTimestampTest.java fails after JDK-8027781

Reviewed-by: weijun, coffeys, mullan
2018-10-09 15:59:05 -07:00
Aleksei Efimov d85de226f0 8210951: Test sun/security/ssl/SSLContextImpl/CustomizedCipherSuites.java fails
Reviewed-by: pkoppula, coffeys
2018-10-01 23:44:46 +01:00
Anton Litvinov 47e8a9bcd5 Merge 2018-08-29 00:17:27 +01:00
Prasadrao Koppula 2852f9e9bf 8208350: Disable all DES cipher suites
Reviewed-by: mullan, jnimeh, coffeys
2018-08-28 19:38:43 +01:00
Prasadrao Koppula dd038ece35 8208350: Disable all DES cipher suites
Reviewed-by: mullan, jnimeh, coffeys
2018-08-23 13:23:39 +05:30
Aleksei Efimov a7bd5b379a Merge 2018-08-03 19:50:58 +01:00
Prasadrao Koppula b9d40c7d6c 8074462: Handshake messages can be strictly ordered
Co-authored-by: Sean Coffey <sean.coffey@oracle.com>
Reviewed-by: xuelei
2018-07-12 14:13:45 +05:30
Prasadrao Koppula 84f51e3cea 8074462: Handshake messages can be strictly ordered
Co-authored-by: Sean Coffey <sean.coffey@oracle.com>
Reviewed-by: xuelei
2018-07-12 14:13:45 +05:30
Abhijit Saha 44e5ded870 Merge 2018-04-18 22:38:11 +00:00
Abhijit Saha 1755b3dea9 Merge 2018-03-19 16:58:49 -07:00
Abhijit Saha a73a0bf1f6 Merge 2018-03-19 13:33:50 -07:00
Sean Coffey 2dce26e955 8193892: Impact of noncloneable MessageDigest implementation
Reviewed-by: wetmore
2018-03-06 18:29:10 +00:00
Ivan Gerasimov 2c183b8f36 8076117: EndEntityChecker should not process custom extensions after PKIX validation
Reviewed-by: xuelei, mullan
2018-02-16 09:43:14 -08:00
Ivan Gerasimov 8571061e2d 8076117: EndEntityChecker should not process custom extensions after PKIX validation
Reviewed-by: xuelei, mullan
2018-02-16 09:43:14 -08:00
Abhijit Saha 4ca4f782e3 Merge 2018-02-06 11:06:30 -08:00
Ivan Gerasimov 0ed1824f9e 8175075: Add 3DES to the default disabled algorithm security property
Reviewed-by: xuelei, mullan, rhalade
2018-01-23 08:17:25 -08:00
Ivan Gerasimov 1e9ffc523c 8157898: SupportedDSAParamGen.java failed with timeout
Reviewed-by: xuelei
2018-02-08 15:59:10 -08:00
Ivan Gerasimov 7e41726c83 8051972: sun/security/pkcs11/ec/ReadCertificates.java fails intermittently
Reviewed-by: mullan
2018-02-07 17:11:24 -08:00
Abhijit Saha add1ae6e4c Merge 2018-01-16 22:58:44 -08:00
Ivan Gerasimov 575c7c3530 8192987: keytool should remember real storetype if it is not provided
Reviewed-by: mullan
2018-01-03 00:46:54 -08:00
Abhijit Saha 459a38a062 Merge 2017-12-15 09:05:18 -08:00
Prasadarao Koppula b601993757 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Reviewed-by: wetmore, xuelei, rhalade, coffeys, bgopularam
2017-12-15 11:45:40 +00:00
Prasadarao Koppula 207edc6b1d 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Reviewed-by: wetmore, xuelei, rhalade, coffeys, bgopularam
2017-12-15 11:45:40 +00:00
Abhijit Saha 139fe74b74 Merge 2017-11-21 08:23:13 -08:00
Abhijit Saha 9db2050ba5 Merge 2017-11-14 13:10:37 -08:00
Ivan Gerasimov 4dacd5be7d 8192987: keytool should remember real storetype if it is not provided
Reviewed-by: mullan
2018-01-03 00:46:54 -08:00
Ivan Gerasimov 627c07f033 8185292: Stricter key generation
Reviewed-by: mullan
2017-11-04 17:23:38 -07:00
Sean Coffey 03e1860391 8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java fails on Solaris x64 5.10
Reviewed-by: igerasim
2017-11-07 17:30:51 +00:00
Abhijit Saha a9414ea46e Merge 2017-11-02 11:35:41 -07:00
Abhijit Saha 8540bb4686 Merge 2017-11-01 19:29:14 -07:00
Abhijit Saha 3634f44ece Merge 2017-10-24 23:16:46 -07:00
Rob McKenna 355548c34e Merge 2017-10-23 06:39:58 -07:00
Ivan Gerasimov f9dacef22f 8185292: Stricter key generation
Reviewed-by: mullan
2017-11-04 17:23:38 -07:00
Sean Coffey 1ddbac42be 8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java fails on Solaris x64 5.10
Reviewed-by: igerasim
2017-11-07 17:30:51 +00:00
Ivan Gerasimov 6df41bfacd 8163237: Restrict the use of EXPORT cipher suites
Reviewed-by: mullan, igerasim, rhalade, jnimeh
2017-10-16 09:45:57 -07:00