liangsp
/
afu8u
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
45,164 Commits 1 Branch 0 Tags 178 MiB
Commit Graph

1419 Commits

Author SHA1 Message Date
Prasadarao Koppula b601993757 8148421: Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension 
Reviewed-by: wetmore, xuelei, rhalade, coffeys, bgopularam
 2017-12-15 11:45:40 +00:00
Abhijit Saha 6838d70e26 Merge 2017-11-21 13:11:21 -08:00
Abhijit Saha 139fe74b74 Merge 2017-11-21 08:23:13 -08:00
Abhijit Saha 9db2050ba5 Merge 2017-11-14 13:10:37 -08:00
Ramanand Patil 95dc54a7ab 8190258: (tz) Support tzdata2017c 
8190259: test tck.java.time.zone.TCKZoneRules is broken by tzdata2017c

Reviewed-by: naoto, martin
 2017-11-14 12:28:43 +05:30
Ivan Gerasimov 4dacd5be7d 8192987: keytool should remember real storetype if it is not provided 
Reviewed-by: mullan
 2018-01-03 00:46:54 -08:00
Abhijit Saha 8540bb4686 Merge 2017-11-01 19:29:14 -07:00
Abhijit Saha 3634f44ece Merge 2017-10-24 23:16:46 -07:00
Rob McKenna 355548c34e Merge 2017-10-23 06:39:58 -07:00
Ivan Gerasimov f9dacef22f 8185292: Stricter key generation 
Reviewed-by: mullan
 2017-11-04 17:23:38 -07:00
Sean Coffey 1ddbac42be 8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java fails on Solaris x64 5.10 
Reviewed-by: igerasim
 2017-11-07 17:30:51 +00:00
Ivan Gerasimov 6df41bfacd 8163237: Restrict the use of EXPORT cipher suites 
Reviewed-by: mullan, igerasim, rhalade, jnimeh
 2017-10-16 09:45:57 -07:00
Abhijit Saha 66033f391f Merge 2017-10-10 17:15:56 -07:00
Ivan Gerasimov 4f58554347 8158633: BASE64 encoded cert not correctly parsed with UTF-16 
Reviewed-by: mullan
 2017-10-06 21:26:55 -07:00
Ivan Gerasimov 9945fb90b2 8187023: Cannot read pkcs11 config file in UTF-16 environment 
Reviewed-by: ascarpino
 2017-10-06 21:25:40 -07:00
Rob McKenna 88bb749c4f 8184328: JDK 8u131 socketRead0 hang at SSL read 
Reviewed-by: xuelei, chegar, coffeys
 2017-09-27 14:00:28 +01:00
Abhijit Saha 3d3b07c481 Merge 2017-08-23 13:10:56 -07:00
Abhijit Saha 0cd112f6dd Merge 2017-08-15 13:42:45 -07:00
Prasadarao Koppula a00b33bdfe 8057810: New defaults for DSA keys in jarsigner and keytool 
Reviewed-by: coffeys, valeriep
 2017-08-15 11:46:02 -07:00
Sean Coffey a2d837f50c 8182879: Add warnings to keytool when using JKS and JCEKS 
Reviewed-by: mullan, weijun
 2017-08-01 16:36:54 +01:00
Prasadarao Koppula 79ae87d905 8057810: New defaults for DSA keys in jarsigner and keytool 
Reviewed-by: coffeys, valeriep
 2017-08-04 13:02:18 +05:30
Sean Coffey 87597f417d 8148108: Disable Diffie-Hellman keys less than 1024 bits 
Reviewed-by: xuelei
 2017-08-08 11:52:28 +01:00
Sean Coffey e33989471c 8182879: Add warnings to keytool when using JKS and JCEKS 
Reviewed-by: mullan, weijun
 2017-08-01 16:36:54 +01:00
Weijun Wang 035a32ff1f 8177569: keytool should not warn if signature algorithm used in cacerts is weak 
Reviewed-by: mullan
 2017-07-25 14:36:20 +01:00
Weijun Wang b34deeeb24 8171319: keytool should print out warnings when reading or generating cert/cert req using weak algorithms 
Reviewed-by: coffeys
 2017-07-26 11:21:32 +01:00
Weijun Wang fb6c1f0e7e 8177569: keytool should not warn if signature algorithm used in cacerts is weak 
Reviewed-by: mullan
 2017-07-25 14:36:20 +01:00
Weijun Wang b8654e8f4e 8171319: keytool should print out warnings when reading or generating cert/cert req using weak algorithms 
Reviewed-by: coffeys
 2017-07-26 11:21:32 +01:00
Weijun Wang 5e60b9b7d9 8029659: Keytool, print key algorithm of certificate or key entry 
Reviewed-by: xuelei
 2017-07-25 13:02:03 +01:00
Weijun Wang d2fcc8cce1 8029659: Keytool, print key algorithm of certificate or key entry 
Reviewed-by: xuelei
 2017-07-25 13:02:03 +01:00
Prasadarao Koppula 9dacb4a632 8178794: Correct Kerberos ticket grants 
Reviewed-by: coffeys, valeriep
 2017-07-24 13:56:39 +05:30
Prasadarao Koppula 63857370f5 8178794: Correct Kerberos ticket grants 
Reviewed-by: coffeys, valeriep
 2017-07-24 13:56:39 +05:30
Ivan Gerasimov 65ccaf9928 8181048: Refactor existing providers to refer to the same constants for default values for key length 
Reviewed-by: mullan, ahgross
 2017-07-21 03:33:04 -07:00
Abhijit Saha be9310b24d Merge 2017-08-08 09:56:25 -07:00
Abhijit Saha 8f947e2c77 Merge 2017-08-01 14:35:17 -07:00
John Jiang d121cf8df5 8137255: sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java timeouts intermittently 
Sun/security/provider/NSASuiteB/TestDSAGenParameterSpec.java timeouts intermittently due to large DSA key parameter generation.

Reviewed-by: valeriep
 2017-09-08 10:41:02 -07:00
Sean Coffey c5042ff7d8 8072452: Support DHE sizes up to 8192-bits and DSA sizes up to 3072-bits 
8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java fails on solaris

Reviewed-by: xuelei
 2017-10-23 02:28:19 -07:00
Abhijit Saha 466c5c865a Merge 2017-07-10 15:41:57 -07:00
Bhanu Prakash Gopularam 9efb9fbf94 8179564: Missing @bug for tests added with JDK-8165367 
Updated bugid in tests

Reviewed-by: robm
 2017-07-05 23:50:20 -07:00
Bhanu Prakash Gopularam 0061e590c9 8179564: Missing @bug for tests added with JDK-8165367 
Updated bugid in tests

Reviewed-by: robm
 2017-07-05 23:50:20 -07:00
Abhijit Saha eef4dd64e2 Merge 2017-07-03 15:26:55 -07:00
Abhijit Saha 6bfd9cb6d4 Merge 2017-07-02 22:41:21 -07:00
Abhijit Saha 03d0f7a714 Merge 2017-06-25 21:56:40 -07:00
Bhanu Prakash Gopularam ac315e4bd0 8181975: Run sun/security/pkcs11 tests on Mac 
Updated path for nss-libs for MacOSX platform

Reviewed-by: coffeys
 2017-06-22 01:33:27 -07:00
Ivan Gerasimov b91200f11a 8182614: Backout JDK-8140436 from 8u161 
Reviewed-by: xuelei
 2017-06-21 08:57:17 -07:00
Ivan Gerasimov e5c294545b 8181439: Test the jdk.tls.namedGroups System Property 
Reviewed-by: valeriep
 2017-06-08 13:58:40 -07:00
Bhanu Prakash Gopularam 340e1f703c 8165367: Additional tests for JEP 288: Disable SHA-1 Certificates 
The new tests just focus on the usage constraints TLSSever and TLSClient with TLS communication

Reviewed-by: ascarpino
 2017-05-24 02:25:28 -07:00
Ivan Gerasimov 236f3c363c 8140436: Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS 
Reviewed-by: valeriep, jnimeh, apetcher
 2017-05-25 21:22:55 -07:00
Bhanu Prakash Gopularam d8057c00e0 8165367: Additional tests for JEP 288: Disable SHA-1 Certificates 
The new tests just focus on the usage constraints TLSSever and TLSClient with TLS communication

Reviewed-by: ascarpino
 2017-05-24 02:25:28 -07:00
Anthony Scarpino 0abfc3cbe7 8176536: Improved algorithm constraints checking 
Reviewed-by: mullan
 2017-03-23 08:44:17 -07:00
Ivan Gerasimov f44d6056e7 8037346: Need to terminate server process if client runs into problems 
Reviewed-by: weijun
 2017-05-16 10:45:29 -07:00
Rob McKenna 60b34cafd8 Merge 2017-05-05 06:08:19 -07:00
Abhijit Saha 065ebe261e Merge 2017-04-14 09:44:21 -07:00
Prasadarao Koppula 42f3e94e76 8157035: Use stronger algorithms and keys for JSSE testing 
Reviewed-by: coffeys
 2017-04-13 14:22:03 +01:00
Ramanand Patil 8800ad657c 8177449: (tz) Support tzdata2017b 
Reviewed-by: martin, naoto
 2017-04-10 16:17:00 +05:30
Abhijit Saha af5fc8173e Merge 2017-04-04 11:57:35 -07:00
Anthony Scarpino 70c77671bd 8176536: Improved algorithm constraints checking 
Reviewed-by: mullan
 2017-03-23 08:41:32 -07:00
Ivan Gerasimov 5e69f509ba 8175251: Failed to load RSA private key from pkcs12 
Enhanced DER library with extra arg to control leading-0 check

Reviewed-by: mullan
 2017-03-17 11:55:24 -07:00
Ramanand Patil 583900cf37 8176044: (tz) Support tzdata2017a 
Reviewed-by: naoto
 2017-03-10 12:50:22 +05:30
Ramanand Patil 809704369a 8176044: (tz) Support tzdata2017a 
Reviewed-by: naoto
 2017-03-10 12:50:22 +05:30
Rob McKenna cb435183d7 8198963: Fix new rmi property name 
Reviewed-by: smarks
 2018-03-04 16:33:27 +00:00
Rob McKenna e36719b2d8 8193833: Better RMI connection support 
Reviewed-by: smarks
 2018-02-15 19:03:51 +00:00
Abhijit Saha 2152587c7e Merge 2018-01-26 10:06:34 -08:00
Ivan Gerasimov 4026bed3a0 8175075: Add 3DES to the default disabled algorithm security property 
Reviewed-by: xuelei, mullan, rhalade
 2018-01-23 08:17:25 -08:00
Ivan Gerasimov eaae3debbe 8190674: sun/security/tools/jarsigner/TimestampCheck.java failed with java.nio.file.NoSuchFileException: ts2.cert 
Reviewed-by: mullan
 2018-01-17 17:47:16 -08:00
Ivan Gerasimov c8f38d4ac2 8180289: jarsigner treats timestamped signed jar invalid after the signer cert expires 
Reviewed-by: mullan
 2018-01-17 17:46:25 -08:00
Ivan Gerasimov ca89a35306 8172529: Use PKIXValidator in jarsigner 
Reviewed-by: xuelei, mullan, alanb
 2018-01-17 17:45:24 -08:00
Ivan Gerasimov 0bc41aff7b 8158887: sun/security/tools/jarsigner/concise_jarsigner.sh timed out 
Reviewed-by: xuelei
 2018-01-17 17:43:56 -08:00
Ivan Gerasimov cf8341aa4b 8146377: test/sun/security/tools/jarsigner/concise_jarsigner.sh failing 
Reviewed-by: xuelei
 2018-01-17 17:42:32 -08:00
Ivan Gerasimov 4be03d39fb 8130132: jarsigner should emit warning if weak algorithms or keysizes are used 
Reviewed-by: mullan
 2018-01-17 17:41:05 -08:00
Ivan Gerasimov 2d5b8c8d8b 8049834: Two security tools tests do not run with only JRE 
Reviewed-by: mullan
 2018-01-17 17:39:38 -08:00
Jaroslav Bachorik 332ada5c1c 8139870: sun.management.LazyCompositeData.isTypeMatched() fails for composite types with items of ArrayType 
Reviewed-by: dfuchs
 2016-10-04 19:14:01 +01:00
Ivan Gerasimov 1a214dc546 8087144: sun/security/krb5/auto/MaxRetries.java fails with Retry count is -1 less 
8153146: sun/security/krb5/auto/MaxRetries.java failed with timeout

Reviewed-by: xuelei
 2016-09-30 21:57:49 +03:00
Ivan Gerasimov d237394910 8077670: sun/security/krb5/auto/MaxRetries.java may fail with BindException 
Reviewed-by: chegar
 2016-09-30 21:55:30 +03:00
Ivan Gerasimov abf99a55b8 8181048: Refactor existing providers to refer to the same constants for default values for key length 
Reviewed-by: mullan, ahgross
 2017-08-21 13:32:56 -07:00
Anthony Scarpino 53577d1fda 8176536: Improved algorithm constraints checking 
Reviewed-by: mullan
 2017-03-23 08:44:17 -07:00
Abhijit Saha 224191a203 Merge 2017-03-21 22:34:27 -07:00
Sean Coffey 0503048f23 8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java failing with cert error in 8u121 b01 
8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java should run in ovm mode

Reviewed-by: xuelei
 2017-03-20 10:00:47 -07:00
Abhijit Saha 710e076f47 Merge 2017-03-09 21:16:36 -08:00
Rajan Halade d70a72826a 8155049: New tests from 8144566 fail with "No expected Server Name Indication" 
Reviewed-by: xuelei
 2016-05-16 10:36:51 -07:00
Ramanand Patil 44b7282d86 8144566: Custom HostnameVerifier disables SNI extension 
Reviewed-by: coffeys
 2016-09-23 15:14:57 +05:30
Ramanand Patil 3abf355a3a 8177449: (tz) Support tzdata2017b 
Reviewed-by: martin, naoto
 2017-04-10 16:17:00 +05:30
Ivan Gerasimov 2340375521 8175251: Failed to load RSA private key from pkcs12 
Enhanced DER library with extra arg to control leading-0 check

Reviewed-by: mullan
 2017-03-17 11:55:24 -07:00
Sean Coffey 12ec028423 8173783: IllegalArgumentException: jdk.tls.namedGroups 
Reviewed-by: xuelei, wetmore
 2017-02-08 12:10:00 +00:00
Vyom Tewari cf9ebaa41a 7167293: FtpURLConnection connection leak on FileNotFoundException 
Reviewed-by: chegar, rriggs
 2016-04-05 17:07:56 +01:00
Sean Coffey 06cf35197e 8173783: IllegalArgumentException: jdk.tls.namedGroups 
Reviewed-by: xuelei, wetmore
 2017-02-08 12:10:00 +00:00
Ramanand Patil 7eb93659cf 8170316: (tz) Support tzdata2016j 
Reviewed-by: martin, okutsu
 2016-12-12 17:30:20 +05:30
Svetlana Nikandrova de4e8cac97 8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java failed with "Error while cleaning up threads after test" 
Reviewed-by: xuelei
 2016-08-29 20:55:06 +03:00
Sean Coffey d3b6af46f5 8162916: Test sun/security/krb5/auto/UnboundSSL.java fails 
Reviewed-by: weijun, asmotrak
 2016-08-19 07:42:29 +01:00
Svetlana Nikandrova b84265ce76 8162876: [TEST_BUG] sun/net/www/protocol/http/HttpInputStream.java fails intermittently 
Reviewed-by: chegar
 2016-08-08 20:16:53 +03:00
Svetlana Nikandrova e4ff3ddbff 8146602: jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test fails with NullPointerException 
Reviewed-by: dfuchs, clanger
 2016-08-18 16:27:15 +03:00
Ramanand Patil 84e7a64897 8171121: Enhancing jar checking 
Reviewed-by: ascarpino
 2016-12-26 16:00:45 +05:30
Rob McKenna c8bafaeada 8170131: Certificates not being blocked by jdk.tls.disabledAlgorithms property 
8166393: disabledAlgorithms property should not be strictly parsed

Reviewed-by: mullan
 2016-12-09 16:22:45 +00:00
Roger Riggs ebb1a0808b 8164908: ReflectionFactory support for IIOP and custom serialization 
Reviewed-by: chegar, psandoz
 2016-12-08 14:06:39 -05:00
Ivan Gerasimov a8f74f0a50 8059212: Modify sun/security/smartcardio manual regression tests so that they do not just fail if no cardreader found 
Reviewed-by: mullan
 2016-11-30 13:46:05 +03:00
Ramanand Patil fc3e9ac7d9 8169688: Backout (remove) MD5 from jdk.jar.disabledAlgorithms for January CPU 
Reviewed-by: igerasim
 2016-12-05 10:07:47 -08:00
Rob McKenna 906af4f8a6 8169911: Enhanced tests for jarsigner -verbose -verify after JDK-8163304 
Reviewed-by: coffeys
 2016-11-23 14:35:00 +00:00
Ramanand Patil 15ecdda994 8169191: (tz) Support tzdata2016i 
Reviewed-by: martin, okutsu
 2016-11-15 23:33:19 +05:30
Sean Coffey 9d8281d062 8166432: Bad 8u112 merge of sun/security/tools/jarsigner/warnings/Test.java 
Reviewed-by: vinnie
 2016-11-14 10:29:58 -08:00
Rob McKenna 0ec5ee77cf 8163304: jarsigner -verbose -verify should print the algorithms used to sign the jar 
Reviewed-by: weijun
 2016-10-21 14:04:14 +01:00
Ramanand Patil 09c74208b0 8166875: (tz) Support tzdata2016g 
Reviewed-by: martin, okutsu
 2016-10-12 16:29:59 +05:30