Merge

Support RSASSS-PSS for TLS 1.2

Change CancelledResponse.java on ProblemList

set signature parameters after key initialization, and more

http-client-branch: fixed race condition in SSLFD when EOF is received while in BUFFER_UNDERFLOW; Improved debug traces

Merge

Update on SSLKeyExchange.java and more

Fix test com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java

Merge

JDK-8188051-branch removing files

JDK-8188051-branch updates

Merge

http-client-branch: merge with default

Update on SSLMasterKeyDerivation.java

http-client-branch: merge with default

http-client-branch: merge

http-clint-branch: review comment - route errors and cf completion fix in SubscriberWrapper

http-client-branch: review comment - formatting in HttpRequest apidoc

http-client-branch: merge with default

http-client-branch: review comment - fix some static imports

http-client-branch: review comment - consistent use of status line in exception messages

http-client-branch: merge with default

http-client-branch: review comment - HttpHeaders::hashCode implementation doesn't obey its specification

read side key limits

Merge

typo, format and copyrigth corrections

http-client-branch: review comment - need to split SplitResponse/SplitResponseSSL further

http-client-branch: review comment - Split ThrowingPushPromises

http-client-branch: review comment - split ThrowingPublishers

http-client-branch: review coment - split ThrowingSubscribers test

http-client-branch: review comment: log rather than debug in ConcurrentResponses

http-client-branch: review comment - need some high level traces to show error and subscription of HTTP/1 read subscriber

http-client-branch: review comment: reduce iterations in MappingResponseSubscribe test

http-client-branch: review comment: reduce iterations in NoBody tests

http-client-branch: review comment: split large ShortResponseBody test

http-client-branch: Fix SSLFlowDelegate race

http-client-branch: prepare tests for TLS1.3 Contributed-by: michaelm

http-client-branch: Improve channel traces

supported_versions for TLS 1.2

http-client-branch: Added a 'channel' category for high-level logs

http-client-branch: merge with default

http-client-branch: add an immutable request implementation

Merge

Experimental fix (?) for macosx ARFLAGS.

http-client-branch: improved logging and fixed race condition with throwing subscribers in onComplete

http-client-banch: connect failures should mostly result in ConnectExeption

Various nits and dead code removal

Some windows fixes.

Disable labelnotused for jvm.

ProblemList update

ProblemList update

http-client-branch: fixed ShortBodyResponse issues

Merge

Set application protocol even if the extension is not available

http-client-branch: revert accidental problem list change

http-client-branch: review comment: shared executor and fixes in ShortResponseTest

http-client-branch: 8203771 - It's not possible to override default user agent with java.net.http HTTPClient 8203771: It's not possible to override default user agent with java.net.http HTTPClient Reviewed-by: chegar

Enable RSASSA-PSS for TLS 1.2, and socket close checking

http-client-branch: improve error logging for HTTP/2 connection shutdown

http-client-branch: review comment: remove duplicate message type from synchronous send

http-client-branch: review comment: minor API corrections

Merge

http-client-branch: review comment: move default executor to implNote

http-client-branch: review comment: possible NPE in tests

Cherry-pick 8204850: BarrierSet::make_* should be static

Merge

Fix Solaris build failure

Merge

Clean up CipherSuite

Clean up of SSLConfiguration, correct the key size of RSASSA-PSS signature

Handle Windows and os::vm_allocation_granularity()

http-client-branch: fix regression introcuced by last changeset

Merge

Clean up of SSLContextImpl

Fix jdk.sctp for gcc.

Restore flags from borken merge.

Restore flags lost in merge.

http-client-branch: review comment: better handling for error conditions and tests to verify

http-client-branch: review comment: minor editorial change to package-level description

http-client-branch: review comment: minor editorial change to WebSocket.Listener

Fix merge errors.

Merge

Close ihse-nativecompilation-branch

Merge error.

Merge

Fix merge mistake.

Merge

Close ihse-jdk-library-branch

Merge

Code clean up for CipherSuite, etc

Use StackWalker and checking content type after decryption

clean up SSLSessionImpl

code review nits and TrasnportContext constructor changes

Code clean up for unsupported DTLS 1.3

code cleanup for SSLSessionContextImpl.java

handle EOFException for SSLSocket

Cleanup unused methods in RSASignature.java

cleanup on SignatureScheme.java

Merge

Rename Stringize to Stringizer

Merge

use right EC named group as signature algorithm

Minor nits and cleanup across SSLExtension classes Summary: Correct spelling errors in comments and variable names, remove dead code.

Minor nits and cleanup across SSLExtension classes Summary: Correct spelling errors in comments and variable names, remove dead code.

add debug log for pre_shared_key extension

Updates for session resumption and key update

Make HelloCookieManager abstract

Removed past file of JDK-8146283

Merge

Fix windows compilation issues.

Making an inner class private in PskKeyExchamgeModesExtension

Fixing a null pointer issue in PskKeyExchangeModesExtension

http-client-branch: synchronous send should be on the exception stack

InputRecord related fixes

another KRB5 cleanup in java.naming

remove more references of KRB5 and move the existing cipher suites to unsupported

Add documentation to JdkNativeCompilation.gmk.

Fix native generated includes.

Merge

http-client-branch: review comment - WebSocket tests

Merge

Address TLS 1.3 comments output stream classes, go through JsseJce class to get Mac instance. Summary: TLS 1.3 comments output stream classes, go through JsseJce class to get Mac instance.

more jgss cleanup

setting HTTP client default TLS version back to 1.2 only

Arrays::equals is exclusive, fix RandomCookie

http-client-branch: more descriptive HTTP/1.1 exception detail messages

http-client-branch: merge

http-client-branch: merge

http-client-branch: review comment - refinement of WebSocket specification

http-client-branch: review comment - WebSocket wording and realignment of javadoc

http-client-branch: dependent tasks execute in the common pool

http-client-branch: typo Contributed-by: Jaikiran Pai <jai.forums2013@gmail.com>

Merge

minor nit fixes

Merge

cleanup on HelloCookieManager, RSAClientKeyExchange and NewSessionTicket

Make TestUniverse test Epsilon too

Handle HSDB printout for Epsilon

Handle SA Heap Summary better

Change "unexpected heap type" to a more generic version

Fix SA heap iteration code

Little reformatting in logging

http-client-branch: review comment - WebSocket/HttpClient wording

Merge

Merge

missing newline at end of HKDF.java

pre_shared_key extensio code cleanup, and a test update

key and iv implementation update, and two tests correction

issue with named group checking in KeyShareExtension

check keys as well of a credential or possession

fix line wrap and redundancy call

Enabling TLS 1.3 in HTTP client defaults

Merge

http-client-branch: move immutable flow to an impl note

http-client-branch: fix javadoc examples in BodySubscribers

http-client-branch: fix bug in property value reading

Address TLS 1.3 rollup comments in HKDF, CertificateStatus and CertStatusExtension Summary: Address TLS 1.3 rollup comments in HKDF, CertificateStatus and CertStatusExtension

Prevent SSLEngineKeyLimit from hanging

minor fix to SSLEngine result status when input buffer is empty

Fixed: No newline at end of file

Merge

integer overflow, remove ununsed code and comments

Merge

Merge

http-client-branch: HttpClient throws IOException when receiving 401/407 with no WWW-Authenticate/Proxy-Authenticate header 8203882: HttpClient throws IOException when receiving 401/407 with no WWW-Authenticate/Proxy-Authenticate header Reviewed-by: chegar

Print heap steps more verbosely, but also less frequently

Multiple threads should print/update counters once

Merge

http-client-branch: review comment - HPACK misc. improvements (2)

safe copy functions

Add bounds check for output length in HKDF expand operation Summary: Make the HKDF expand operation conform to the specification by limiting the allowed output length.

TLS 1.3 support for StapleEnableProps OCSP Stapling jtreg test Summary: Adds test cases for OCSPstapling using the TLS 1.3 handshake and its use of the OCSP stapling system properties.

Add includes for explicit dependencies, remove stale includes

Fix COMPILER2 handling: include macros.hpp before use

Fix GC enum declaration

cleanup

http-client-branch: 8203433 (httpclient) Add tests for HEAD and 304 responses.

Fix indentation in vmStructs_gc.hpp

Make sure C2 configurations are executed in tests

Epsilon's INCLUDE_XXX, XXX_ONLY and NOT_XXX should be in alphabetic order

Remove UseTLAB from supports_tlab_allocation

Remove obsolete INCLUDE_EPSILONGC guards

Merge

gss_OID_desc constants

http-client-branch: review comment - HPACK misc. improvements

Merge

http-client-branch: performance - reduce context switching

getNamesForMech, more import/export

http-client-branch: Make HttpHeaders final

http-client-branch: further update to max streams fix

Create Name with meth to support export

http-client-branch: fix intermittent problem with stream counting by decrementing counter before completing the subscriber CF

clean up TODO tags

implement version downgrad protection

Add twitter branch.

Merge

added jdk.tls.server.protocols

DH left padding of public key

TLS 1.3 support for HttpsUrlConnClient OCSP Stapling jtreg test Summary: Adds test cases for OCSPstapling using the TLS 1.3 handshake and HttpsUrlConnection

A couple of minor session resumption fixes

Merge

TLS 1.3 support in OCSP stapling jtreg tests Summary: Adds test cases for OCSP stapling using the TLS 1.3 handshake

Use DiffieHellman rather than the DH alias

http-client-branch: Fix for new MaxStreams.java test

remove TODO tags if no need any more

Merge

http-client-branch: HttpClient HTTP/1.1 could be more lenient and accept LF as well as CRLF as header separator. 8203427: HttpClient HTTP/1.1 could be more lenient and accept LF as well as CRLF as header separator. Reviewed-by: chegar

mismatching sign_alg and sign_alg_cert

Merge

8196389: Should HttpClient support SETTINGS_MAX_CONCURRENT_STREAMS from the server Reviewed-by: chegar, dfuchs

TestElasticTLABDecay is misconfigured

Last stylistic touchups

sun/net/www/protocol/https/HttpsURLConnection/ReadTimeout.java adapts to new exception hierarchy

close issues introduced in TLS 1.3 implementation

Merge

Merge

Setting X25519/X448 to TLS 1.3 only

merge

Initial working XDH support in TLS. I should try to refactor the code a bit.

com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java adapts to new exception hierarchy

Re-generate certificates for javax/net/ssl/templates/SSLSocketTemplate.java

RSA key is too short to support TLS 1.3

No more renegotiation in TLS 1.3

Use default signature algorithms for TLS 1.2

initial commit for JDK-8171279-XDH-TLS-branch

Fix build failure

Formatting and renames

Fix 32-bit builds

sun/security/ssl/AppOutputStream/NoExceptionOnClose.java changes the expected exception

Merge

Elastic TLAB machinery should handle decays

Serviceability support for Epsilon

The expected exception may be not thrown in order

Use SEC_WHCAR* as gss_name_t

DTLS fix for proper closing

http-client-branch: improve test stability by allowing retry on java.net.ConnectException

TLS 1.3, update on SSLSocketImpl.checkEOF()

improper certificates in SSLSocketTemplate.java

jdk/testlibrary/testkeys upgraded to use RSA_4096 key

TLS 1.3, incorrect encode of NewSessionTicket for empty extension