RFR: 8279842: HTTPS Channel Binding support for Java GSS/Kerberos

[Daniel Fuchs]

On Mon, 17 Jan 2022 06:32:13 GMT, Prasadrao Koppula <pkoppula at openjdk.org> wrote:

>> This system property should only be used for TLS, and the CBT can be used in both the SPNEGO mechanism and the Kerberos 5 mechanism. Therefore I suggest the name should probably contain "tls" (or maybe "https") and "negotiate".
>> 
>> BTW, will you reuse this system property if we decide to support CBT in NTLM as well?
>
> I vote for "jdk.https.tls.cbt"

> It's actually a purely system property rather than a Net property at the moment (same as the other spnego ones). Maybe, I should convert them all to net properties, so they can be documented/set in that file?

AFAICS this file documents properties used by the networking task - not necessarily net properties (e.g. java.net.preferIPv6Addresses is documented there but AFAICT it is a plain system property)

-------------

PR: https://git.openjdk.java.net/jdk/pull/7065