[ping] 11u] RFR(S): 8237474: Default SSLEngine should create in server role

[Lindenmaier, Goetz]

Hi,

Could someone please have a look at this downport?

Thanks,
 Goetz

> -----Original Message-----
> From: jdk-updates-dev <jdk-updates-dev-bounces at openjdk.java.net> On
> Behalf Of Lindenmaier, Goetz
> Sent: Friday, April 17, 2020 1:09 PM
> To: jdk-updates-dev <jdk-updates-dev at openjdk.java.net>
> Subject: [CAUTION] [11u] RFR(S): 8237474: Default SSLEngine should create in
> server role
> 
> Hi,
> 
> I would like to downport this for parity with 11.0.8-oracle.
> I had to resolve the copyrights.
> 
> Further, in src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java,
> method engineGetDefaultSSLParameters() is to be patched.
> 
> engineGetDefaultSSLParameters() was introduced in 12 by "8209031:
> SSLSocket should throw an exception when configuring DTLS"
> https://bugs.openjdk.java.net/browse/JDK-8209031, which is implemented
> in https://bugs.openjdk.java.net/browse/JDK-8208641.
> 
> I dropped the change to this method as it's not in 11.
> 
> http://cr.openjdk.java.net/~goetz/wr20/8237474-SSLEngine_server_role-
> jdk11/01/
> 
> original change:
> https://bugs.openjdk.java.net/browse/JDK-8237474
> https://hg.openjdk.java.net/jdk/jdk/rev/74384366ec1d
> 
> Best regards,
>   Goetz.