security-dev  

Messages by Thread

• RFR: 8395367: SSLServerSocketImpl.accept() accesses sslConfig without holding serverSocketLock Artem Semenov
• RFR: Merge 624e4263a16082fe6d217d87eb5f91ef42c2c0c0 Brent Christian
  • Re: RFR: Merge 624e4263a16082fe6d217d87eb5f91ef42c2c0c0 Phil Race
  • Re: RFR: Merge 624e4263a16082fe6d217d87eb5f91ef42c2c0c0 Mikael Vidstedt
  • Re: RFR: Merge 624e4263a16082fe6d217d87eb5f91ef42c2c0c0 [v2] Brent Christian
  • Integrated: Merge 624e4263a16082fe6d217d87eb5f91ef42c2c0c0 Brent Christian
• RFR: 8394261: TLS 1.3: SSLSessionImpl.childSessions holds long object chains Roland Mesde
• RFR: 8394890: ProblemList the failing PKCS11 tests David Holmes
  • Re: RFR: 8394890: ProblemList the failing PKCS11 tests Daniel D . Daugherty
  • Re: RFR: 8394890: ProblemList the failing PKCS11 tests David Holmes
  • Integrated: 8394890: ProblemList the failing PKCS11 tests David Holmes
• Re: RFR: 8394259: x86: improve CRC32 intrinsic with AVX2 and PCLMULQDQ Vladimir Kozlov
  • Re: RFR: 8394259: x86: improve CRC32 intrinsic with AVX2 and PCLMULQDQ Larry
• RFR: 8394869: MLKEM AVX2 and AVX512 intrinsics and improvements Volodymyr Paprotski
• Re: RFR: 8365608: Test is skipped without skip exception /test/jdk/security/infra/java/security/cert/CertPathValidator/certification/ValidatePathWithParams.java [v3] Mikhail Yankelevich
• RFR: 8385968: TLS support for Hybrid Key Exchange Provider Hai-May Chao
  • Re: RFR: 8385968: TLS support for Hybrid Key Exchange Provider Weijun Wang
  • Re: RFR: 8385968: TLS support for Hybrid Key Exchange Provider Weijun Wang
  • Re: RFR: 8385968: TLS support for Hybrid Key Exchange Provider Weijun Wang
  • Re: RFR: 8385968: TLS support for Hybrid Key Exchange Provider [v2] Hai-May Chao
  • Re: RFR: 8385968: TLS support for Hybrid Key Exchange Provider [v2] Hai-May Chao
• RFR: 8371736: Implement ML-KEM Named Groups for TLS 1.3 Weijun Wang
• RFR: 8394613: sun/security/pkcs12/KeytoolOpensslInteropTest.java#GenerateOpensslPKCS12 fails when OpenSSL is built without the legacy provider yaqsun
  • Re: RFR: 8394613: sun/security/pkcs12/KeytoolOpensslInteropTest.java#GenerateOpensslPKCS12 fails when OpenSSL is built without the legacy provider Matthew Donovan
  • Re: RFR: 8394613: sun/security/pkcs12/KeytoolOpensslInteropTest.java#GenerateOpensslPKCS12 fails when OpenSSL is built without the legacy provider yaqsun
  • Re: RFR: 8394613: sun/security/pkcs12/KeytoolOpensslInteropTest.java#GenerateOpensslPKCS12 fails when OpenSSL is built without the legacy provider [v2] yaqsun
  • Re: RFR: 8394613: sun/security/pkcs12/KeytoolOpensslInteropTest.java#GenerateOpensslPKCS12 fails when OpenSSL is built without the legacy provider [v2] Matthew Donovan
  • Re: RFR: 8394613: sun/security/pkcs12/KeytoolOpensslInteropTest.java#GenerateOpensslPKCS12 fails when OpenSSL is built without the legacy provider [v2] yaqsun
  • Re: RFR: 8394613: sun/security/pkcs12/KeytoolOpensslInteropTest.java#GenerateOpensslPKCS12 fails when OpenSSL is built without the legacy provider [v3] yaqsun
• [External] : [BUG] krb5.conf "clockskew" does not accept MIT-compatible duration-string format Osipov, Michael (IN IT IN)
  • Re: [External] : [BUG] krb5.conf "clockskew" does not accept MIT-compatible duration-string format Wei-Jun Wang
• [External] : [FEATURE REQUEST] Support MIT krb5's "request_timeout" as a fallback when kdc_timeout is unset Osipov, Michael (IN IT IN)
  • Re: [External] : [FEATURE REQUEST] Support MIT krb5's "request_timeout" as a fallback when kdc_timeout is unset Wei-Jun Wang
• Re: RFR: 8357466: Create test for Ciphers that are using ByteBuffers backed by MemorySegments [v7] Matthew Donovan
• RFR: 8386459: implKyberAddPolyJava() should return the result parameter, not through the first operand Shawn Emery
  • Re: RFR: 8386459: implKyberAddPolyJava() should return the result parameter, not through the first operand Volodymyr Paprotski
  • Re: RFR: 8386459: implKyberAddPolyJava() should return the result parameter, not through the first operand Shawn Emery
  • Re: RFR: 8386459: implKyberAddPolyJava() should return the result parameter, not through the first operand Volodymyr Paprotski
  • Re: RFR: 8386459: implKyberAddPolyJava() should return the result parameter, not through the first operand Anthony Scarpino
  • Integrated: 8386459: implKyberAddPolyJava() should return the result parameter, not through the first operand Shawn Emery
• RFR: 8393160: Increase limb sizes for Curve448 field operations in Java Shawn Emery
• Re: RFR: 8387577: [s390x] TestSharedCloseJFR.java failure due to null pc [v3] Richard Reingruber
• RFR: 8394195: Update security tests to use value classes Matthew Donovan
• RFR: 8392771: Add 2 Certum roots Rajan Halade
  • Re: RFR: 8392771: Add 2 Certum roots Sean Mullan
  • Integrated: 8392771: Add 2 Certum roots Rajan Halade
• RFR: 8393432: P-384 field operations should utilize larger limb sizes Shawn Emery
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes Sean Mullan
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes Shawn Emery
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes Volodymyr Paprotski
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes Shawn Emery
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes [v2] Shawn Emery
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes [v2] Volodymyr Paprotski
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes [v2] Shawn Emery
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes [v2] Volodymyr Paprotski
  • Re: RFR: 8393432: P-384 field operations should utilize larger limb sizes [v2] Shawn Emery
• Re: RFR: 8380361: Display -XshowSettings configuration data via jcmd [v16] Kieran Farrell
• Re: RFR: 8382042: Add drill-into and path info to ASN1Formatter [v14] Weijun Wang
• RFR: 8393741: ML-DSA CMS has no requirement on digest algorithm when signed attributes are not present Weijun Wang
• RFR: 8393730: NullPointerException in X500Principal.hashCode()/equals() due to unsafe publication of thisX500Name (seen on aarch64) Chris Hegarty
  • Re: RFR: 8393730: NullPointerException in X500Principal.hashCode()/equals() due to unsafe publication of thisX500Name (seen on aarch64) Jaikiran Pai
  • Re: RFR: 8393730: NullPointerException in X500Principal.hashCode()/equals() due to unsafe publication of thisX500Name (seen on aarch64) [v2] Chris Hegarty
  • Re: RFR: 8393730: NullPointerException in X500Principal.hashCode()/equals() due to unsafe publication of thisX500Name (seen on aarch64) [v2] Chris Hegarty
• RFR: 8393454: Rename ValueFieldLayoutInfo to ValueFieldInfo Stefan Karlsson
  • Re: RFR: 8393454: Rename ValueFieldLayoutInfo to ValueFieldInfo [v2] Stefan Karlsson
  • Re: RFR: 8393454: Rename ValueFieldLayoutInfo to ValueFieldInfo Stefan Karlsson
• RFR: 8387730: Test javax/crypto/KDF/KDFDelayedProviderThreadingTest.java timed out Matthew Donovan
  • Re: RFR: 8387730: Test javax/crypto/KDF/KDFDelayedProviderThreadingTest.java timed out Weijun Wang
  • Integrated: 8387730: Test javax/crypto/KDF/KDFDelayedProviderThreadingTest.java timed out Matthew Donovan
• RFR: 8385585: EmSignRootG2CA.java test fails with: couldn't determine EE certificate status Rajan Halade
  • Re: RFR: 8385585: EmSignRootG2CA.java test fails with: couldn't determine EE certificate status Matthew Donovan
  • Re: RFR: 8385585: EmSignRootG2CA.java test fails with: couldn't determine EE certificate status Sean Mullan
  • Integrated: 8385585: EmSignRootG2CA.java test fails with: couldn't determine EE certificate status Rajan Halade
• [External] : Proposal: Add tls-unique Channel Binding to SSLSession for TLS 1.2 (RFC 5929) Divang Sharma
  • [External] : Re: Proposal: Add tls-unique Channel Binding to SSLSession for TLS 1.2 (RFC 5929) Divang Sharma
• [External] : Review of CSR JDK-8389137 Andreas Chmielewski
• RFR: 8386371: Remove Entrust G4 root CA Rajan Halade
  • Re: RFR: 8386371: Remove Entrust G4 root CA Sean Mullan
  • Integrated: 8386371: Remove Entrust G4 root CA Rajan Halade
• RFR: 8391802: Enhance TLS handshake benchmark using ML-DSA authentication Hai-May Chao
  • Re: RFR: 8391802: Enhance TLS handshake benchmark using ML-DSA authentication Hai-May Chao
  • Re: RFR: 8391802: Enhance TLS handshake benchmark using ML-DSA authentication [v2] Hai-May Chao
  • Re: RFR: 8391802: Enhance TLS handshake benchmark using ML-DSA authentication [v2] Hai-May Chao
  • Re: RFR: 8391802: Enhance TLS handshake benchmark using ML-DSA authentication [v2] Mark Powers
  • Re: RFR: 8391802: Enhance TLS handshake benchmark using ML-DSA authentication [v2] Mark Powers
• RFR: 8384311: sun/security/krb5/KrbKdcRep.java throws NPE Shawn Emery
  • Re: RFR: 8384311: sun/security/krb5/KrbKdcRep.java throws NPE Jaikiran Pai
  • Re: RFR: 8384311: sun/security/krb5/KrbKdcRep.java throws NPE Shawn Emery
  • Re: RFR: 8384311: sun/security/krb5/KrbKdcRep.java throws NPE Weijun Wang
  • Integrated: 8384311: sun/security/krb5/KrbKdcRep.java throws NPE Shawn Emery
• RFR: 8392624: Example in DRBGParameters.Capability class description has typo and is incorrect Heetae Park
  • Re: RFR: 8392624: Example in DRBGParameters.Capability class description has typo and is incorrect Weijun Wang
  • Re: RFR: 8392624: Example in DRBGParameters.Capability class description has typo and is incorrect duke
  • Re: RFR: 8392624: Example in DRBGParameters.Capability class description has typo and is incorrect Jean-Noël Rouvignac
  • Re: RFR: 8392624: Example in DRBGParameters.Capability class description has typo and is incorrect Weijun Wang
  • Re: RFR: 8392624: Example in DRBGParameters.Capability class description has typo and is incorrect Jean-Noël Rouvignac
  • Integrated: 8392624: Example in DRBGParameters.Capability class description has typo and is incorrect Heetae Park
• [External] : Offer to fix JDK-8392624 (DrbgParameters.Capability javadoc example) HEETAE PARK
  • [External] : Re: Offer to fix JDK-8392624 (DrbgParameters.Capability javadoc example) HEETAE PARK
  • Re: [External] : Re: Offer to fix JDK-8392624 (DrbgParameters.Capability javadoc example) Wei-Jun Wang
• RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable Shawn Emery
  • Re: RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable Andrew Dinn
  • Re: RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable Shawn Emery
  • Re: RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable [v2] Shawn Emery
  • Re: RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable [v2] Shawn Emery
  • Re: RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable [v2] Shawn Emery
  • Re: RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable [v2] Andrew Haley
  • Re: RFR: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable [v2] Andrew Dinn
  • Integrated: 8392331: Cleanup AArch64 Keccak intrinsics code to be more readable Shawn Emery
• RFR: 8392782: Integer overflow in sun/security/util/BitArray.java constructor causes NegativeArraySizeException Mark Powers
  • Re: RFR: 8392782: Integer overflow in sun/security/util/BitArray.java constructor causes NegativeArraySizeException David Carlier
  • Re: RFR: 8392782: Integer overflow in sun/security/util/BitArray.java constructor causes NegativeArraySizeException Mark Powers
  • Re: RFR: 8392782: Integer overflow in sun/security/util/BitArray.java constructor causes NegativeArraySizeException Anthony Scarpino
  • Integrated: 8392782: Integer overflow in sun/security/util/BitArray.java constructor causes NegativeArraySizeException Mark Powers
• RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Kieran Farrell
  • Re: RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Matthew Donovan
  • Re: RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Kieran Farrell
  • Re: RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Matthew Donovan
  • Re: RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Matthew Donovan
  • Re: RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Matthew Donovan
  • Re: RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Kieran Farrell
  • Re: RFR: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps duke
  • Integrated: 8361344: Address sun/security/ssl/SSLLogger.java code coverage gaps Kieran Farrell
• RFR: 8392780: Sporadic failure of test ServerRenegoWithTwoVersions.java and NoImpactServerRenego.java Arno Zeller
  • Re: RFR: 8392780: Sporadic failure of test ServerRenegoWithTwoVersions.java and NoImpactServerRenego.java Christoph Langer
  • Re: RFR: 8392780: Sporadic failure of test ServerRenegoWithTwoVersions.java and NoImpactServerRenego.java Matthias Baesken
  • Integrated: 8392780: Sporadic failure of test ServerRenegoWithTwoVersions.java and NoImpactServerRenego.java Arno Zeller
• New draft JEP: TLS Support for the QUIC Transport Daniel Jelinski
• RFR: 8376837: JSSE typos/minor tweaks Sapiens
  • Re: RFR: 8376837: JSSE typos/minor tweaks Jaikiran Pai
  • Re: RFR: 8376837: Typo in code comment in sun/security/ssl/TransportContext.java Sapiens
  • Re: RFR: 8376837: Typo in code comment in sun/security/ssl/TransportContext.java [v2] ByeongGyu Jeon
  • Re: RFR: 8376837: Typo in code comment in sun/security/ssl/TransportContext.java [v2] duke
  • Re: RFR: 8376837: Typo in code comment in sun/security/ssl/TransportContext.java [v2] Sean Mullan
  • Integrated: 8376837: Typo in code comment in sun/security/ssl/TransportContext.java ByeongGyu Jeon
• RFR: 8388484: RFC 9846-style Supported Group Selection Weijun Wang
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection Weijun Wang
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection Sean Mullan
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection Sean Mullan
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection [v2] Weijun Wang
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection [v2] Weijun Wang
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection [v2] Sean Mullan
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection [v3] Weijun Wang
  • Re: RFR: 8388484: RFC 9846-style Supported Group Selection [v3] Artur Barashev
• RFR: 8392076: Sporadic failure of test InvalidateServerSessionRenegotiate.java Arno Zeller
  • Re: RFR: 8392076: Sporadic failure of test InvalidateServerSessionRenegotiate.java Christoph Langer
  • Integrated: 8392076: Sporadic failure of test InvalidateServerSessionRenegotiate.java Arno Zeller
• RFR: 8369615: sun/security/x509/URICertStore/AIACertTimeout.java intermittently fails Matthew Donovan
  • Re: RFR: 8369615: sun/security/x509/URICertStore/AIACertTimeout.java intermittently fails Mikhail Yankelevich
  • Re: RFR: 8369615: sun/security/x509/URICertStore/AIACertTimeout.java intermittently fails [v2] Matthew Donovan
  • Re: RFR: 8369615: sun/security/x509/URICertStore/AIACertTimeout.java intermittently fails [v2] Matthew Donovan
  • Re: RFR: 8369615: sun/security/x509/URICertStore/AIACertTimeout.java intermittently fails [v2] Mikhail Yankelevich
• RFR: 8391863: Missed usage cases when Capturing Named Group information in TLSHandshakeEvent Artur Barashev
  • Re: RFR: 8391863: Missed usage cases for TLSHandshakeEvent Sean Mullan
  • Integrated: 8391863: Missed usage cases for TLSHandshakeEvent Artur Barashev
  • Re: RFR: 8391863: Missed usage cases when Capturing Named Group information in TLSHandshakeEvent Daniel Jeliński
• Integrated: 8391343: [PPC64] Share AES round key sequences between block and CBC stubs Suchismith Roy
• RFR: 8391760: [windows] libjaas nt.c seems to have some handle leaks Matthias Baesken
  • Re: RFR: 8391760: [windows] libjaas nt.c seems to have some handle leaks Martin Doerr
  • Re: RFR: 8391760: [windows] libjaas nt.c seems to have some handle leaks Matthias Baesken
  • Re: RFR: 8391760: [windows] libjaas nt.c seems to have some handle leaks Daniel Jeliński
  • Re: RFR: 8391760: [windows] libjaas nt.c seems to have some handle leaks Lutz Schmidt
  • Integrated: 8391760: [windows] libjaas nt.c seems to have some handle leaks Matthias Baesken
  • Re: RFR: 8391760: [windows] libjaas nt.c seems to have some handle leaks Matthias Baesken
• [External] : KeychainStore include user and predefined roots within one truststore David Boden
  • Re: [External] : KeychainStore include user and predefined roots within one truststore Sean Mullan
• RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Matthew Donovan
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Mark Powers
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Sean Mullan
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Sean Mullan
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v2] Sean Mullan
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v2] Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v2] Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v2] Sean Mullan
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v3] Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v3] Sean Mullan
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v3] Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v3] Sean Mullan
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v3] Weijun Wang
  • Re: RFR: 8391472: ML-DSA and ML-KEM default parameter sets for keytool [v4] Weijun Wang
• RFR: 8388519: Add APIs to get supported and negotiated named groups Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups Alan Bateman
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups Alan Bateman
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups ExE Boss
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups Sean Mullan
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v2] Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v3] Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v3] Sean Mullan
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v3] Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v3] Sean Mullan
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v3] Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v4] Artur Barashev
  • Re: RFR: 8388519: Add APIs to get supported and negotiated named groups [v4] Sean Mullan

• Earlier messages