Commit Graph

170 Commits

Author SHA1 Message Date
Sean Mullan 68e393c051 8207258: Distrust TLS server certificates anchored by Symantec Root CAs
Add class CADistrustPolicy and distrust Symantec.

Reviewed-by: weijun
2019-03-01 00:55:45 +00:00
Paul Hohensee fd2ac91462 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883
Terminate cipher lists with TLS_EMPTY_RENEGOTIATION_INFO_SCSV.

Reviewed-by: jnimeh, clanger
2019-02-22 17:45:01 +00:00
Prasadrao Koppula 39c1549588 8211883: Disable anon and NULL cipher suites
Reviewed-by: mullan, coffeys
2018-10-30 11:06:28 +05:30
Prasadrao Koppula dd038ece35 8208350: Disable all DES cipher suites
Reviewed-by: mullan, jnimeh, coffeys
2018-08-23 13:23:39 +05:30
Prasadrao Koppula 84f51e3cea 8074462: Handshake messages can be strictly ordered
Co-authored-by: Sean Coffey <sean.coffey@oracle.com>
Reviewed-by: xuelei
2018-07-12 14:13:45 +05:30
Ivan Gerasimov f74d036f42 8189760: sun/security/ssl/CertPathRestrictions/TLSRestrictions.java failed with unexpected Exception intermittently
Adds synchronization to make sure the server exception is available

Reviewed-by: xuelei
2018-05-31 12:25:23 -07:00
Rob McKenna 671991a7a0 Merge 2018-04-18 12:41:29 -07:00
Abhijit Saha 4ca4f782e3 Merge 2018-02-06 11:06:30 -08:00
Ivan Gerasimov 0ed1824f9e 8175075: Add 3DES to the default disabled algorithm security property
Reviewed-by: xuelei, mullan, rhalade
2018-01-23 08:17:25 -08:00
Abhijit Saha add1ae6e4c Merge 2018-01-16 22:58:44 -08:00
Abhijit Saha 459a38a062 Merge 2017-12-15 09:05:18 -08:00
Prasadarao Koppula b601993757 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Reviewed-by: wetmore, xuelei, rhalade, coffeys, bgopularam
2017-12-15 11:45:40 +00:00
Prasadarao Koppula 207edc6b1d 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension
Reviewed-by: wetmore, xuelei, rhalade, coffeys, bgopularam
2017-12-15 11:45:40 +00:00
Abhijit Saha 139fe74b74 Merge 2017-11-21 08:23:13 -08:00
Abhijit Saha a9414ea46e Merge 2017-11-02 11:35:41 -07:00
Abhijit Saha 3634f44ece Merge 2017-10-24 23:16:46 -07:00
Ivan Gerasimov 6df41bfacd 8163237: Restrict the use of EXPORT cipher suites
Reviewed-by: mullan, igerasim, rhalade, jnimeh
2017-10-16 09:45:57 -07:00
Ivan Gerasimov 82671e9ce4 8163237: Restrict the use of EXPORT cipher suites
Reviewed-by: mullan, igerasim, rhalade, jnimeh
2017-10-16 09:45:57 -07:00
Abhijit Saha 66033f391f Merge 2017-10-10 17:15:56 -07:00
Rob McKenna 88bb749c4f 8184328: JDK 8u131 socketRead0 hang at SSL read
Reviewed-by: xuelei, chegar, coffeys
2017-09-27 14:00:28 +01:00
Sean Coffey 87597f417d 8148108: Disable Diffie-Hellman keys less than 1024 bits
Reviewed-by: xuelei
2017-08-08 11:52:28 +01:00
Abhijit Saha 466c5c865a Merge 2017-07-10 15:41:57 -07:00
Bhanu Prakash Gopularam 9efb9fbf94 8179564: Missing @bug for tests added with JDK-8165367
Updated bugid in tests

Reviewed-by: robm
2017-07-05 23:50:20 -07:00
Bhanu Prakash Gopularam 0061e590c9 8179564: Missing @bug for tests added with JDK-8165367
Updated bugid in tests

Reviewed-by: robm
2017-07-05 23:50:20 -07:00
Abhijit Saha 03d0f7a714 Merge 2017-06-25 21:56:40 -07:00
Bhanu Prakash Gopularam 340e1f703c 8165367: Additional tests for JEP 288: Disable SHA-1 Certificates
The new tests just focus on the usage constraints TLSSever and TLSClient with TLS communication

Reviewed-by: ascarpino
2017-05-24 02:25:28 -07:00
Ivan Gerasimov f44d6056e7 8037346: Need to terminate server process if client runs into problems
Reviewed-by: weijun
2017-05-16 10:45:29 -07:00
Prasadarao Koppula 42f3e94e76 8157035: Use stronger algorithms and keys for JSSE testing
Reviewed-by: coffeys
2017-04-13 14:22:03 +01:00
Sean Coffey 06cf35197e 8173783: IllegalArgumentException: jdk.tls.namedGroups
Reviewed-by: xuelei, wetmore
2017-02-08 12:10:00 +00:00
Svetlana Nikandrova de4e8cac97 8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java failed with "Error while cleaning up threads after test"
Reviewed-by: xuelei
2016-08-29 20:55:06 +03:00
Rob McKenna c8bafaeada 8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property
8166393: disabledAlgorithms property should not be strictly parsed

Reviewed-by: mullan
2016-12-09 16:22:45 +00:00
Sean Coffey f1d95402e2 8148516: Improve the default strength of EC in JDK
Reviewed-by: xuelei
2016-09-19 11:44:50 +01:00
Ivan Gerasimov 14a439400a 8165071: Expand TLS support
Reviewed-by: jnimeh, ahgross, asmotrak
2016-09-18 23:22:46 +03:00
Chris Hegarty f2d179b05b 8160838: Better HTTP service
Reviewed-by: ahgross, alanb, michaelm
2016-07-18 14:38:10 +01:00
Sean Coffey 12ec028423 8173783: IllegalArgumentException: jdk.tls.namedGroups
Reviewed-by: xuelei, wetmore
2017-02-08 12:10:00 +00:00
Abhijit Saha 0cc47e1d8b Merge 2016-05-23 09:11:51 -07:00
Ivan Gerasimov 7fc707d8d0 8146387: Test SSLSession/SessionCacheSizeTests socket accept timed out
Reviewed-by: weijun, wetmore
2016-04-26 20:31:59 +03:00
Ivan Gerasimov 97f5b2160f 8146669: Test SessionTimeOutTests fails intermittently
Reviewed-by: mullan
2016-04-26 20:31:56 +03:00
Ivan Gerasimov 5c4771e7b7 8037557: test SessionCacheSizeTests.java timeout
Reviewed-by: weijun
2016-04-26 20:31:58 +03:00
Ivan Gerasimov 2e6171c321 8144313: Test SessionTimeOutTests can be timeout
Reviewed-by: mullan
2016-04-26 20:31:54 +03:00
Ivan Gerasimov a5a7a15c18 8144773: Further reduce use of MD5
Reviewed-by: mullan, wetmore, jnimeh, ahgross
2015-12-15 16:20:09 +03:00
Sean Coffey 08f3b0d50f 8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
Reviewed-by: xuelei
2015-11-03 19:07:45 +00:00
Abhijit Saha 61522abf9c 8138712: Backout JDK-8030829 and JDK-8136742 from 8u65, and 8u66 release
Backing out changeset 25108312011d, 343b26d13f12

Reviewed-by: coffeys
2015-10-01 11:16:16 -07:00
Rob McKenna d8a206c71e 8189646: sun/security/ssl/SSLSocketImpl/SSLSocketCloseHang.java failed with "java.net.SocketTimeoutException: Read timed out"
Reviewed-by: coffeys
2017-11-29 16:29:54 +00:00
Xue-Lei Andrew Fan 4adc0fd91d 8081760: Better group dynamics
Reviewed-by: coffeys, mullan, weijun, jnimeh, ahgross, asmotrak
2015-07-23 09:51:31 +01:00
Abhijit Saha 8a22711985 Merge 2017-01-17 08:10:57 -08:00
Abhijit Saha 88915997b1 Merge 2016-10-11 14:56:09 -07:00
Abhijit Saha 36817061e0 Merge 2016-09-27 12:55:16 -07:00
Sean Coffey cc4ceb5e3b 8164846: CertificateException missing cause of underlying exception
Reviewed-by: xuelei
2016-09-01 11:01:47 +01:00
Svetlana Nikandrova 6d856e22b7 8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java failed with "Error while cleaning up threads after test"
Reviewed-by: xuelei
2016-08-29 20:55:06 +03:00