git: openjdk/jdk17u-dev: 8349583: Add mechanism to disable signature schemes based on their TLS scope

[Goetz Lindenmaier]

Changeset: fe850da3
Branch: master
Author:    Goetz Lindenmaier <goetz at openjdk.org>
Date:      2025-08-07 09:18:06 +0000
URL:       https://git.openjdk.org/jdk17u-dev/commit/fe850da38a3fc0c9ce6cf9348efca3c846e97143

8349583: Add mechanism to disable signature schemes based on their TLS scope

Reviewed-by: mdoerr
Backport-of: b91c92752c65f2c05549c4e4cd8e413e9f5e2d28

! src/java.base/share/classes/sun/security/ssl/CertSignAlgsExtension.java
! src/java.base/share/classes/sun/security/ssl/CertificateRequest.java
! src/java.base/share/classes/sun/security/ssl/HandshakeContext.java
! src/java.base/share/classes/sun/security/ssl/PostHandshakeContext.java
! src/java.base/share/classes/sun/security/ssl/PreSharedKeyExtension.java
! src/java.base/share/classes/sun/security/ssl/SSLAlgorithmConstraints.java
+ src/java.base/share/classes/sun/security/ssl/SSLScope.java
! src/java.base/share/classes/sun/security/ssl/SSLSessionImpl.java
! src/java.base/share/classes/sun/security/ssl/ServerHello.java
! src/java.base/share/classes/sun/security/ssl/SessionTicketExtension.java
! src/java.base/share/classes/sun/security/ssl/SignatureAlgorithmsExtension.java
! src/java.base/share/classes/sun/security/ssl/SignatureScheme.java
! src/java.base/share/classes/sun/security/util/DisabledAlgorithmConstraints.java
! src/java.base/share/conf/security/java.security
! test/jdk/javax/net/ssl/templates/SSLEngineTemplate.java
+ test/jdk/sun/security/ssl/SignatureScheme/AbstractCheckSignatureSchemes.java
+ test/jdk/sun/security/ssl/SignatureScheme/DisableSignatureSchemePerScopeDTLS12.java
+ test/jdk/sun/security/ssl/SignatureScheme/DisableSignatureSchemePerScopeTLS12.java
+ test/jdk/sun/security/ssl/SignatureScheme/DisableSignatureSchemePerScopeTLS13.java
+ test/jdk/sun/security/ssl/SignatureScheme/MixingTLSUsageConstraintsWithNonTLS.java
! test/jdk/sun/security/ssl/SignatureScheme/SigSchemePropOrdering.java