Commits

Commits on Sep 13, 2026

Clarify PKIXNameConstraints divergence from bc-csharp
peterdettman
committed
ab16374
The pgsc module is now carried by the Maven BOM and so the generated SBOM, by the dist gathering tasks and by the OSGi scan, which picks up tls-klog as well, and the module graph and :test aggregat…
dghgit
committed
3835693
Recorded the Ant build traps found building the r1rv86 tag in a clean tree: the empty core/src/main/resources git cannot carry, the build1-* scripts not propagating an Ant failure, the shared build…
dghgit
committed
14dae7d
Removed the maintainer's name and home-directory paths from the docs/claude guidance and the bundled skills, both of which ship with the source, keeping the /opt locations the build scripts hardcod…
dghgit
committed
5c054c3
A tested dNSName, rfc822Name host or uniformResourceIdentifier host carrying an empty label is now refused wherever a constraint of that type is in force, rather than canonicalised into a name it i…
dghgit
committed
415f8ea
Added TODO[ecgost] notes at the four hand-rolled ECGOST3410 encoders and decoders in the ecgost and ecgost12 provider key classes and at the lightweight PublicKeyFactory, PrivateKeyFactory and ECGO…
peterdettman
committed
3533c3c
SubjectPublicKeyInfoFactory and PrivateKeyInfoFactory now choose between the GOST R 34.10-2001 and GOST R 34.10-2012 key algorithm OIDs by the digestParamSet rather than by whether the publicKeyPar…
peterdettman
committed
816cc20
Add windows-build skill: driving the Gradle build and fast single-class JUnit loops from a Windows checkout. Bash vs PowerShell gradlew, running under one JDK, verifying fresh results (all Test tas…
peterdettman
committed
6cf9b6c
A DTLS handshake deadlocked when a handshake message ahead of the peer's ChangeCipherSpec (a client's CertificateVerify, for example) was lost while the ChangeCipherSpec and Finished behind it arri…
peterdettman
committed
604c661
Added CMS SignedData and PKIX certification path test coverage for the eighteen Composite ML-DSA parameter sets, which the CMS and cert-path signature algorithm finders already reached with no test…
dghgit
committed
97fe077
The KTS key-wrapping Ciphers now validate a KTSParameterSpec's key derivation function when they take it, so a KDF the provider cannot service is reported as the InvalidAlgorithmParameterException …
dghgit
committed
d141bf4
The HMAC SHA-512/224 and SHA-512/256 object identifiers are now registered as Mac and KeyGenerator aliases, which the SHA512 mappings had omitted while registering them for SecretKeyFactory, so get…
dghgit
committed
38c7e7b
KeyAgreement now reports the IllegalStateException javax.crypto.KeyAgreement specifies when a shared secret is asked for before doPhase has completed the agreement, rather than returning whatever e…
dghgit
committed
1080579
The Ant source and javadoc copies of every module now exclude test directories at any depth rather than one level down, and javadoc-pg no longer documents the gpg and bcpg test packages, so no test…
dghgit
committed
0a579db
Opened the 1.87 release notes block with a TBD date, renumbered the section headings accordingly, and shortened the 1.86 and 1.85 entries, which had grown long enough to be hard to read.
dghgit
committed
d414722
Moved to 1.87-SNAPSHOT: build properties, the four provider version strings and doubles, the three ArmoredOutputStream BCPG version stamps and the pg tests asserting on the armor Version header.
dghgit
committed
42a1040

Commits on Sep 11, 2026

Commits on Sep 10, 2026

Commits on Sep 9, 2026

Commits on Sep 8, 2026

DTLS record layer now silently discards a record for every fatal alert raised while decoding it except internal_error, rather than only bad_record_mac, so a forged datagram whose body is too short …
peterdettman
committed
8a04208