RFR: 8351354: Enhance java -XshowSettings:security:tls to show enabled TLS groups and signature algorithms

Jaikiran Pai jpai at openjdk.org
Tue Jul 8 05:16:39 UTC 2025


On Thu, 3 Apr 2025 18:47:43 GMT, Matthew Donovan <mdonovan at openjdk.org> wrote:

> In this PR I added TLS groups and signature algorithms to the output of the show settings flag. The values are printed in a single column, like the cipher suites. There can be a lot of values so putting on a single line is ugly. I tried putting them in columns, but it is hard to read.

Hello Matthew, In recent times we have been adding more of these configuration debugging into the -XshowSettings option. I'm unusure to what extent this option should be advertized or used for gathering such details of the runtime. Would this be more suitable to be done as a `jcmd` command? Something like a `jcmd <pid> VM.security_configuration`? To me, that feels like a more natural place to be adding support for details like these. More so because I think it's very rare for applications to be launching the JVM with the `-XshowSettings` option.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/24424#issuecomment-3047385294


More information about the core-libs-dev mailing list