45d7db1c27
8160838: Better HTTP service
...
Reviewed-by: ahgross, alanb, michaelm
2016-07-18 14:38:10 +01:00
f5da3e8708
8030829: Add MD5 to jdk.certpath.disabledAlgorithms security property
...
Reviewed-by: mullan, weijun
2015-07-03 21:50:43 +03:00
bcb696c0b2
Merge
2015-05-29 10:15:38 -07:00
6509b5b08f
8050374: More Signature tests
...
Reviewed-by: valeriep
2015-05-25 11:47:41 +03:00
95bf9cd469
8076328: Enforce key exchange constraints
...
Reviewed-by: wetmore, ahgross, asmotrak, xuelei
2015-04-24 13:59:30 +03:00
35d4162361
8076221: Disable RC4 cipher suites
...
Reviewed-by: xuelei, wetmore
2015-04-15 11:17:01 +00:00
eb19d4f31e
8043202: Prohibit RC4 cipher suites
...
Reviewed-by: xuelei
2015-04-15 13:26:17 +03:00
21ccf68678
8043201: Deprecate RC4 in SunJSSE provider
...
Reviewed-by: xuelei
2015-03-03 16:26:24 -08:00
b7ef3a6bdc
8061210: Issues in TLS
...
Reviewed-by: jnimeh, mullan, wetmore, ahgross, asmotrak
2014-10-24 11:49:24 +00:00
d2f4448c20
8144773: Further reduce use of MD5
...
Reviewed-by: mullan, wetmore, jnimeh, ahgross
2015-12-15 16:20:09 +03:00
9a4e706ed9
8141287: Add MD5 to jdk.certpath.disabledAlgorithms - Take 2
...
Reviewed-by: xuelei
2015-11-03 19:07:45 +00:00
d812984fbf
Merge
2014-06-03 08:42:15 -07:00
16ad1e8e55
8043200: Decrease the preference mode of RC4 in the enabled cipher suite list
...
Reviewed-by: wetmore, ahgross, asmotrak
2014-06-01 00:48:51 +00:00
08a1aa131e
8162362: Introduce system property to control enabled ciphersuites
...
Reviewed-by: xuelei
2018-03-27 16:54:03 +01:00
e7a6d35ee2
8193892: Impact of noncloneable MessageDigest implementation
...
Reviewed-by: wetmore
2018-03-06 18:29:10 +00:00
39d9d2fb54
Merge
2017-12-22 13:41:38 -08:00
0a9698584d
Merge
2014-02-19 20:10:55 -08:00
3c41d0c0a0
8044860: Vectors and fixed length fields should be verified for allowed sizes
...
Reviewed-by: xuelei
2015-03-19 19:03:38 +03:00
baeacc8e45
8061210: Issues in TLS
...
Reviewed-by: jnimeh, mullan, wetmore, ahgross, asmotrak
2014-10-24 11:49:24 +00:00
f6926a9870
Merge
2014-01-22 17:40:55 -08:00
eb1ee0c0e8
8028537: PPC64: Updated the JDK regression tests to run on AIX
...
Co-authored-by: Jonathan Lu <luchsh@linux.vnet.ibm.com>
Co-authored-by: Steve Poole <spoole@linux.vnet.ibm.com>
Reviewed-by: alanb
2014-01-17 21:54:30 +01:00
03b4e5d3ba
8029235: Update copyright year to match last edit in jdk8 jdk repository for 2013
...
Updated files with 2011, 2012 and 2013 years according to the file's last updated date
Reviewed-by: tbell, lancea, chegar
2013-12-26 12:04:16 -08:00
48ff6566cc
7093640: Enable client-side TLS 1.2 by default
...
Reviewed-by: weijun, mullan, wetmore
2013-12-18 16:46:15 -08:00
f33b9344c3
8031566: regression test failure, SSLEngineBadBufferArrayAccess.java
...
Reviewed-by: mullan
2014-01-20 02:32:31 -08:00
dec69128e0
8021418: Intermittent: SSLSocketSSLEngineTemplate.java test fails with timeout
...
Reviewed-by: xuelei, wetmore
2013-11-27 15:25:36 -08:00
7ba208e79f
8014266: regression test AsyncSSLSocketClose.java time out
...
Reviewed-by: xuelei
2013-11-14 16:08:28 -08:00
cc6f28352f
8023147: Test DisabledShortRSAKeys.java intermittent failed
...
Reviewed-by: mullan
2013-11-13 01:14:23 -08:00
ec67e938e2
8026119: Regression test DHEKeySizing.java failing intermittently
...
Reviewed-by: weijun
2013-10-13 21:10:33 -07:00
1d8fbe7d05
6956398: make ephemeral DH key match the length of the certificate key
...
Reviewed-by: weijun
2013-10-07 18:46:28 -07:00
d5c45c6cde
8024444: Change to use othervm mode of tests in SSLEngineImpl
...
Reviewed-by: mullan
2013-09-09 19:07:05 -07:00
8b9c8247a8
7188657: There should be a way to reorder the JSSE ciphers
...
Reviewed-by: weijun, wetmore
2013-09-07 17:05:22 -07:00
1cff90b335
8024068: sun/security/ssl/javax/net/ssl/ServerName/IllegalSNIName.java fails
...
Reviewed-by: weijun
2013-09-01 20:00:03 -07:00
cac8b88f48
8022228: Intermittent test failures in sun/security/ssl/javax/net/ssl/NewAPIs
...
Reviewed-by: weijun
2013-08-21 19:44:35 -07:00
2e2313ef87
8020842: IDN do not throw IAE when hostname ends with a trailing dot
...
Reviewed-by: weijun, michaelm
2013-08-19 17:42:39 -07:00
26d9259db7
8019544: Need to run ProviderTest.java in othervm mode
...
Reviewed-by: wetmore, xuelei, vinnie
2013-07-26 14:16:53 -07:00
2c7b97640d
8019341: Update CookieHttpsClientTest to use the newer framework
...
Reviewed-by: xuelei, smarks, michaelm
2013-07-05 18:22:58 -07:00
d22a89a1ae
8017049: rename property jdk.tls.rejectClientInitializedRenego
...
Reviewed-by: vinnie, wetmore, mullan
2013-06-26 06:32:40 -07:00
b0246ef1ae
8017157: catch more exception in test RejectClientRenego
...
Reviewed-by: vinnie
2013-06-20 07:48:49 -07:00
1ead1fc8bc
7188658: Add possibility to disable client initiated renegotiation
...
Reviewed-by: weijun, wetmore
2013-06-19 02:33:07 -07:00
7384a4704e
8000456: Add programmatic deadlock detection in SSLEngineDeadlock
...
Reviewed-by: wetmore
2013-06-18 18:50:13 -07:00
a973a4d533
8011680: Re-integrate AEAD implementation of JSSE
...
It is a re-merge of JDK-7030966.
Reviewed-by: wetmore
2013-04-11 18:57:14 -07:00
9e5da0ad31
8009925: Back out AEAD CipherSuites temporarily
...
Reviewed-by: valeriep
2013-03-12 15:31:49 -07:00
9abb185430
7030966: Support AEAD CipherSuites
...
Reviewed-by: weijun, wetmore, valeriep
2013-03-01 02:34:34 -08:00
ec9e303630
8006182: cleanup to use java.util.Base64 in java security component, providers, and regression tests
...
Refactored code to use java.util.Base64 Mime Encoder and Decoder as a replacement for sun.misc.BASE64Encoder and sun.misc.BASE64Decoder
Reviewed-by: vinnie, chegar, sherman
2013-02-21 20:01:22 +00:00
eb1726c151
Merge
2013-02-04 18:08:50 -05:00
12e480040a
8006669: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/PostThruProxy.sh fails on mac
...
Reviewed-by: alanb
2013-01-23 14:45:44 +00:00
a23a1a942b
8004502: Compact Profiles contents
...
Reviewed-by: dholmes, mchung
2013-01-21 23:35:36 -05:00
c12b624078
8005978: shell tests need to use the $COMPILEJDK for javac, jar and other tools
...
Reviewed-by: chegar
2013-01-11 20:19:55 +00:00
b7af263526
Merge
2012-12-28 18:36:41 -08:00
6d41a58c82
7109274: Restrict the use of certificates with RSA keys less than 1024 bits
...
This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.
Reviewed-by: mullan
2012-12-28 00:48:12 -08:00
306cab1006
8004982: JDK8 source with GPL header errors
...
Reviewed-by: ohair
2012-12-20 16:24:50 -08:00
c9063f559f
8003890: corelibs test scripts should pass TESTVMOPTS
...
Reviewed-by: chegar, alanb
2012-12-13 14:47:35 +00:00
d0e329751f
8001569: Regression test GetPeerHost uses static port number
...
Reviewed-by: weijun
2012-11-09 01:15:04 -08:00
430592a30e
7197491: update copyright year to match last edit in jdk8 jdk repository
...
Reviewed-by: chegar, ksrini
2012-11-02 15:50:11 +00:00
b01d15feb0
8001466: Nightly regression test failure of SSLSocketSNISensitive.java
...
Reviewed-by: weijun
2012-10-24 08:25:29 -07:00
1892ebf911
7068321: Support TLS Server Name Indication (SNI) Extension in JSSE Server
...
Reviewed-by: mullan, weijun, wetmore
2012-10-18 01:14:00 -07:00
9c642ad1d2
7200295: CertificateRequest message is wrapping when using large numbers of Certs
...
Reviewed-by: wetmore
2012-09-26 21:05:40 -07:00
8fbd047f8c
6354758: rename old test HttpServer classes
...
Reviewed-by: chegar, michaelm, khazra
2012-09-07 15:30:17 +01:00
e0782017fe
7195733: TEST_BUG: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/B6216082.java failing
...
Reviewed-by: chegar, alanb, xuelei
2012-09-04 02:24:51 -07:00
046f2c92e2
7180038: regression test failure, SSLEngineBadBufferArrayAccess.java
...
Reviewed-by: weijun
2012-07-03 20:29:16 -07:00
c549cc814d
7174244: NPE in Krb5ProxyImpl.getServerKeys()
...
Reviewed-by: weijun
2012-06-06 18:18:58 -07:00
081be38b26
7166570: JSSE certificate validation has started to fail for certificate chains
...
Reviewed-by: wetmore
2012-05-08 18:08:49 -07:00
7775fea771
7142172: Custom TrustManagers that return null for getAcceptedIssuers will NPE
...
Reviewed-by: xuelei
2012-03-30 15:43:13 -07:00
3ecf3e0fa1
7152866: Tests not run because they are missing the @run tag
...
Reviewed-by: chegar, dholmes
2012-03-12 10:17:18 +00:00
3269d85838
7113349: Initial changeset for Macosx port to jdk
...
Co-authored-by: Alexander Potochkin <alexander.potochkin@oracle.com>
Co-authored-by: Alexander Zuev <alexander.zuev@oracle.com>
Co-authored-by: Andrew Brygin <andrew.brygin@oracle.com>
Co-authored-by: Artem Ananiev <artem.ananiev@oracle.com>
Co-authored-by: Alex Strange <astrange@apple.com>
Co-authored-by: Bino George <bino@apple.com>
Co-authored-by: Christine Lu <christine.lu@oracle.com>
Co-authored-by: David Katleman <david.katleman@oracle.com>
Co-authored-by: David Durrence <david_durrence@apple.com>
Co-authored-by: Dmitry Cherepanov <dmitry.cherepanov@oracle.com>
Co-authored-by: Greg Lewis <glewis@eyesbeyond.com>
Co-authored-by: Kevin Miller <kevin_m_miller@apple.com>
Co-authored-by: Kurt Miller <kurt@intricatesoftware.com>
Co-authored-by: Landon Fuller <landonf@plausiblelabs.com>
Co-authored-by: Leonid Romanov <leonid.romanov@oracle.com>
Co-authored-by: Loefty Walkowiak <loefty@apple.com>
Co-authored-by: Mark Reinhold <mark.reinhold@oracle.com>
Co-authored-by: Naoto Sato <naoto.sato@oracle.com>
Co-authored-by: Philip Race <philip.race@oracle.com>
Co-authored-by: Roger Hoover <rhoover@apple.com>
Co-authored-by: Scott Kovatch <scott.kovatch@oracle.com>
Co-authored-by: Sergey ByloKhov <sergey.bylokhov@oracle.com>
Co-authored-by: Mike Swingler <swingler@apple.com>
Co-authored-by: Tomas Hurka <tomas.hurka@oracle.com>
Reviewed-by: jjh, alanb, dholmes, anthony, ohrstrom, ksrini, jrose, weijun, smarks
2012-03-06 20:34:38 +00:00
cd51c0ed25
Merge
2012-02-23 00:14:45 -08:00
162d75c68c
Merge
2012-02-20 11:31:53 -08:00
8ac9bc5858
7141910: Incorrect copyright dates on new test cases
...
Reviewed-by: mullan
2012-02-01 16:00:39 -08:00
08fe131e34
7126889: Incorrect SSLEngine debug output
...
Reviewed-by: xuelei
2012-01-26 17:16:05 -08:00
830a24d326
7132248: sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/CookieHttpsClientTest.java failing
...
Reviewed-by: alanb
2012-01-23 04:44:16 -08:00
c77eb16a79
7129083: CookieManager does not store cookies if url is read before setting cookie manager
...
Reviewed-by: michaelm
2012-01-16 18:05:29 +00:00
8b5551f1eb
7106773: 512 bits RSA key cannot work with SHA384 and SHA512
...
Reviewed-by: weijun
2012-01-12 03:39:37 -08:00
74fcfe6c7e
7123519: problems with certification path
...
Also including the contribution from Dennis Gu
Reviewed-by: mullan, weijun
2012-01-09 20:55:52 -08:00
687f622f95
7115744: Do not call File::deleteOnExit in security tests
...
Reviewed-by: xuelei
2011-11-28 18:16:29 +08:00
7115a56a21
7113275: compatibility issue with MD2 trust anchor and old X509TrustManager
...
Also reviewed by Dennis.Gu@oracle.com
Reviewed-by: mullan
2011-11-23 03:40:12 -08:00
9fb09f41b6
Merge
2011-11-14 18:18:22 -08:00
f03cbcc678
Merge
2011-11-14 11:52:09 -08:00
089b5b16e3
7105780: Add SSLSocket client/SSLEngine server to templates directory
...
Reviewed-by: xuelei
2011-10-31 11:54:19 -07:00
d25a9c128f
7031830: bad_record_mac failure on TLSv1.2 enabled connection with SSLEngine
...
Reviewed-by: xuelei, weijun, asaha
2011-10-18 11:58:57 -07:00
3c41c66fb1
7096936: issue in jsse/runtime
...
7096937: TEST: com/sun/net/ssl/internal/ssl/GenSSLConfigs/main.java need modification as a result of TLS fix
Reviewed-by: wetmore, jdn, xuelei
2011-09-30 18:47:53 -07:00
73b50710f0
7064341: jsse/runtime security problem
...
Reviewed-by: wetmore
2011-09-29 17:31:30 -07:00
610c9dd4e3
7055363: jdk_security3 test target cleanup
...
Reviewed-by: alanb, xuelei
2011-08-12 12:26:31 +08:00
281db94b24
6670868: StackOverFlow with bad authenticated Proxy tunnels
...
Reviewed-by: michaelm
2011-07-27 18:10:10 +01:00
5798f5bb9d
6952814: sun/security/ssl/com/sun/net/ssl/internal/ssl/InputRecord/InterruptedIO.java failing in PIT
...
Reviewed-by: alanb
2011-06-22 19:37:18 -07:00
b99716e22a
Merge
2011-04-17 16:19:29 -07:00
7c8e01891a
Merge
2011-04-13 16:56:16 -07:00
2a48e38d0f
6976117: SSLContext.getInstance("TLSv1.1") returns SSLEngines/SSLSockets without TLSv1.1 enabled
...
Reorg the SSLContext implementation
Reviewed-by: weijun
2011-04-08 02:00:09 -07:00
d2b1e20c7d
7033660: Update copyright year to 2011 on any files changed in 2011
...
Reviewed-by: dholmes
2011-04-06 22:06:11 -07:00
4efe3a9cb7
7027797: take care of ECDH_anon/DH_anon server key exchange for TLS 1.2
...
The signature of server key exanage message could be null
Reviewed-by: vinnie
2011-03-21 22:02:00 -07:00
7705e63e30
7022855: Export "PKIX" as the standard algorithm name of KeyManagerFactory
...
Export the existing "NewSunX509" algorithm implementation using the standard name "PKIX"
Reviewed-by: weijun, wetmore
2011-03-15 23:13:35 -07:00
ba58eb7896
7012003: diamond conversion for ssl
...
Reviewed-by: wetmore
2011-01-14 15:31:45 -08:00
6b6a611c8e
6962318: Update copyright year
...
Reviewed-by: xdono
2010-12-28 15:53:50 -08:00
f685cc171a
6916074: Add support for TLS 1.2
...
6985179: To support Server Name Indication extension for JSSE client
Introduces the algorithm constraints to support signature and hash algorithm selection. Includes contributions from wetmore and weijung.
Reviewed-by: wetmore, weijun
2010-11-01 22:02:35 -07:00
aab01a90d7
4873188: Support TLS 1.1
...
Reviewed-by: wetmore, weijun
2010-10-30 18:39:17 +08:00
0615bd9a48
Merge
2010-10-08 11:27:55 +01:00
784f62993b
6973030: NTLM proxy authentication fails with https
...
Reviewed-by: michaelm
2010-08-03 12:03:03 +01:00
53a219bfee
6914943: Implement final TLS renegotiation fix
...
RFC 5746 implementation
Reviewed-by: wetmore, weijun
2010-06-12 00:42:51 -07:00
fe008ae27a
6943119: Rebrand source copyright notices
...
Reviewed-by: darcy, weijun
2010-05-25 15:58:33 -07:00
61ab8e5bfd
6943219: test/sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/DNSIdentities.java fail in linux
...
Reviewed-by: andrew
2010-04-15 16:37:16 +01:00
52e1e32cdb
6941936: Broken pipe error of test case DNSIdentities.java
...
Reviewed-by: chegar
2010-04-10 09:13:12 +08:00
Chris Hegarty
Ivan Gerasimov
Abhijit Saha
Artem Smotrakov
Xue-Lei Andrew Fan
Sean Coffey
Vladimir Kozlov
Volker Simonis
Lana Steuck
Rajan Halade
Bradford Wetmore
Mark Sheppard
David Holmes
Alan Bateman
David Katleman
Mark Sheppard
John Zavgren
Eric Wang
Alan Bateman
Weijun Wang
Kelly O'Hair
Stuart Marks