RFR: 8366364: Address inconsistencies in SSLParameters object returned by SSLConfiguration#getSSLParameters() call

Francesco Andreuzzi fandreuzzi at openjdk.org
Fri Oct 24 08:36:02 UTC 2025


On Thu, 23 Oct 2025 21:54:24 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

> We need to address the following inconsistencies in SSLConfiguration#getSSLParameters() call:
> - For the signatureSchemes we return only what's been set by the user, the default values are not being returned like for other SSLParameters.
> - namedGroups return value is not being filtered against algorithm constraints, unlike other SSLParameters.

src/java.base/share/classes/sun/security/ssl/SignatureScheme.java line 422:

> 420:                         || config.signatureSchemes == null ?
> 421:                     Arrays.asList(SignatureScheme.values()) :
> 422:                         Arrays.stream(config.signatureSchemes)

The formatting makes this assignment a bit hard to follow. Perhaps a simple `if` statement would behave better?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27961#discussion_r2459322058


More information about the hotspot-runtime-dev mailing list