Re: RFR: 8298872: Update CheckStatus.java for changes to TLS implementation [v5]

2023-02-01 Thread Matthew Donovan
> Updated the test for TLS 1.2 and removed from ProblemList.txt Matthew Donovan has updated the pull request incrementally with one additional commit since the last revision: did some additional cleanup - Changes: - all: https://git.openjdk.org/jdk/pull/11857/files - new:

RFR: 8245654: Add Certigna Root CA

2023-02-01 Thread Rajan Halade
This fix adds Certigna root CA to cacerts trust store. - Commit messages: - Update copyright year in VerifyCACerts.java - update copyright - Merge branch 'master' into 8247698-certigna - Root certificate should not be considered weak - Merge branch 'master' into 8247698-certigna

Integrated: 8301299: Wrong class spec on sun.security.util.Pem

2023-02-01 Thread Weijun Wang
On Wed, 1 Feb 2023 19:25:54 GMT, Weijun Wang wrote: > A trivial doc-only change. This pull request has now been integrated. Changeset: 6c927c92 Author:Weijun Wang URL: https://git.openjdk.org/jdk/commit/6c927c92f7bd01e6b34c1348594b8dff6e760a24 Stats: 2 lines in 1 file changed:

Re: RFR: 8301299: Wrong class spec on sun.security.util.Pem

2023-02-01 Thread Jamil Nimeh
On Wed, 1 Feb 2023 19:25:54 GMT, Weijun Wang wrote: > A trivial doc-only change. Marked as reviewed by jnimeh (Reviewer). - PR: https://git.openjdk.org/jdk/pull/12373

RFR: 8301299: Wrong class spec on sun.security.util.Pem

2023-02-01 Thread Weijun Wang
A trivial doc-only change. - Commit messages: - the fix Changes: https://git.openjdk.org/jdk/pull/12373/files Webrev: https://webrevs.openjdk.org/?repo=jdk=12373=00 Issue: https://bugs.openjdk.org/browse/JDK-8301299 Stats: 2 lines in 1 file changed: 0 ins; 0 del; 2 mod

Re: RFR: 8180266: Convert sun/security/provider/KeyStore/DKSTest.sh to Java Jtreg Test

2023-02-01 Thread Rajan Halade
On Fri, 27 Jan 2023 15:20:09 GMT, Sibabrata Sahoo wrote: > Convert sun/security/provider/KeyStore/DKSTest.sh to Java Jtreg Test. Marked as reviewed by rhalade (Reviewer). - PR: https://git.openjdk.org/jdk/pull/12257

Re: RFR: 8298868: Update EngineCloseOnAlert.java for changes to TLS implementation [v2]

2023-02-01 Thread Rajan Halade
On Fri, 27 Jan 2023 13:01:01 GMT, Matthew Donovan wrote: >> test/jdk/javax/net/ssl/SSLEngine/EngineCloseOnAlert.java line 67: >> >>> 65: >>> 66: public static void main(String[] args) throws Exception { >>> 67: SecurityUtils.removeFromDisabledTlsAlgs("TLSv1"); >> >> Is this still

Re: RFR: 8298872: Update CheckStatus.java for changes to TLS implementation [v4]

2023-02-01 Thread Rajan Halade
On Fri, 27 Jan 2023 13:13:04 GMT, Matthew Donovan wrote: >> Updated the test for TLS 1.2 and removed from ProblemList.txt > > Matthew Donovan has updated the pull request with a new target base due to a > merge or a rebase. The pull request now contains six commits: > > - Merge branch

RFR: 8300939: sun/security/provider/certpath/OCSP/OCSPNoContentLength.java fails due to network errors

2023-02-01 Thread Jamil Nimeh
Hello all, This addresses a test bug where the SimpleOCSPServer would reset the connections made by a client CertPathValidator. I've made some minor changes to how the network data is read and sent from OCSP HTTP GET URLs and on responses, respectively. This will take the test off the

Re: RFR: JDK-8300416 java.security.MessageDigestSpi clone can result in thread-unsafe clones

2023-02-01 Thread Mark Powers
On Wed, 1 Feb 2023 15:13:41 GMT, Matthew Donovan wrote: >> https://bugs.openjdk.org/browse/JDK-8300416 > > test/jdk/java/security/MessageDigest/TestCloneable.java line 95: > >> 93: >> 94: System.out.println(": Shared data check"); >> 95: if (!Arrays.equals(d1.digest(),

Integrated: 8298874: Update TestAllSuites.java for TLS v1.2 and 1.3

2023-02-01 Thread Matthew Donovan
On Fri, 23 Dec 2022 17:08:03 GMT, Matthew Donovan wrote: > * updated test for new TLS protocols and ciphersuites > * code cleanup This pull request has now been integrated. Changeset: 3361a26d Author:Matthew Donovan Committer: Rajan Halade URL:

Re: RFR: JDK-8300416 java.security.MessageDigestSpi clone can result in thread-unsafe clones

2023-02-01 Thread Matthew Donovan
On Tue, 31 Jan 2023 16:54:03 GMT, Mark Powers wrote: > https://bugs.openjdk.org/browse/JDK-8300416 test/jdk/java/security/MessageDigest/TestCloneable.java line 95: > 93: > 94: System.out.println(": Shared data check"); > 95: if (!Arrays.equals(d1.digest(), d2.digest())) { If

RFR: 8301260: Add system property to toggle XML Signature secure validation mode

2023-02-01 Thread Sean Mullan
This change adds a system property that can be used to enable/disable the XML Signature secure validation mode. This is useful for enabling/disabling the mode at runtime. The system property will supersede and have the same name as the XMLCryptoContext property that can be used to

Integrated: 8294527: Some java.security.debug options missing from security docs

2023-02-01 Thread Ryan Wallace
On Mon, 30 Jan 2023 10:23:59 GMT, Ryan Wallace wrote: > Hi, small change to the java.security.debug to enhance help() with missing > options. This pull request has now been integrated. Changeset: bc750f70 Author:ryawalla Committer: Sean Mullan URL: