Re: RFR: 8349910: Implement HTTP/3 for the HTTP Client API

2025-04-18 Thread Chen Liang
On Fri, 18 Apr 2025 13:05:24 GMT, Daniel Fuchs wrote: > Hi, > > Please find here a PR for the implementation of JEP [JDK-8291976: HTTP/3 for > the HTTP Client API](https://bugs.openjdk.org/browse/JDK-8291976). > > The CSR can be viewed at [JDK-8350588: Implement HTTP/3 for the HTTP Client > A

RFR: 8272875: Change the default key manager to PKIX

2025-04-18 Thread Artur Barashev
The current key manager is SunX509, which is configured in the java.security. The SunX509 algorithm does not check of the local certificate. The PKIX algorithm should be preferred now so that the default key manager could be more robust. - Commit messages: - Rework unit tests - U

Re: RFR: 8325766: Review seclibs tests for cert expiry [v4]

2025-04-18 Thread Artur Barashev
On Fri, 18 Apr 2025 14:58:41 GMT, Matthew Donovan wrote: >> This PR updates the CertificateBuilder with a new method that creates a new >> instance with common fields (subject name, public key, serial number, >> validity, and key uses) filled-in. One test, IPIdentities.java, is updated >> to s

Re: RFR: 8325766: Review seclibs tests for cert expiry [v4]

2025-04-18 Thread Matthew Donovan
> This PR updates the CertificateBuilder with a new method that creates a new > instance with common fields (subject name, public key, serial number, > validity, and key uses) filled-in. One test, IPIdentities.java, is updated to > show how the method can be used to create various certificates.

Re: RFR: 8325766: Review seclibs tests for cert expiry [v4]

2025-04-18 Thread Matthew Donovan
On Fri, 18 Apr 2025 15:38:02 GMT, Artur Barashev wrote: >> Matthew Donovan has updated the pull request with a new target base due to a >> merge or a rebase. The pull request now contains 10 commits: >> >> - expanded wildcard imports >> - Merge branch 'master' into certbuilder >> - Merge bra

Re: RFR: 8325766: Review seclibs tests for cert expiry [v4]

2025-04-18 Thread Artur Barashev
On Fri, 18 Apr 2025 14:58:41 GMT, Matthew Donovan wrote: >> This PR updates the CertificateBuilder with a new method that creates a new >> instance with common fields (subject name, public key, serial number, >> validity, and key uses) filled-in. One test, IPIdentities.java, is updated >> to s

Re: RFR: 8325766: Review seclibs tests for cert expiry [v3]

2025-04-18 Thread Artur Barashev
On Fri, 18 Apr 2025 14:24:10 GMT, Matthew Donovan wrote: >> test/jdk/sun/net/www/protocol/https/HttpsURLConnection/IPIdentities.java >> line 243: >> >>> 241: .addBasicConstraintsExt(false, false, -1) >>> 242: >>> .addExtension(CertificateBuilder.createIPSubjectA

Re: RFR: 8325766: Review seclibs tests for cert expiry [v3]

2025-04-18 Thread Matthew Donovan
On Thu, 3 Apr 2025 20:30:33 GMT, Artur Barashev wrote: >> Matthew Donovan has updated the pull request with a new target base due to a >> merge or a rebase. The pull request now contains seven commits: >> >> - reversed order of DN strings when making certificates. >> - Merge branch 'master' i

RFR: 8349910: Implement HTTP/3 for the HTTP Client API

2025-04-18 Thread Daniel Fuchs
Hi, Please find here a PR for the implementation of JEP [JDK-8291976: HTTP/3 for the HTTP Client API](https://bugs.openjdk.org/browse/JDK-8291976). The CSR can be viewed at [JDK-8350588: Implement HTTP/3 for the HTTP Client API](https://bugs.openjdk.org/browse/JDK-8350588) This JEP proposes to