[ping] 11u] RFR(S): 8237474: Default SSLEngine should create in server role

[Hohensee, Paul]

Lgtm.

Paul

On 5/8/20, 3:11 AM, "jdk-updates-dev on behalf of Lindenmaier, Goetz" <jdk-updates-dev-bounces at openjdk.java.net on behalf of goetz.lindenmaier at sap.com> wrote:

    Hi,

    Could someone please have a look at this downport?

    Thanks,
     Goetz

    > -----Original Message-----
    > From: jdk-updates-dev <jdk-updates-dev-bounces at openjdk.java.net> On
    > Behalf Of Lindenmaier, Goetz
    > Sent: Friday, April 17, 2020 1:09 PM
    > To: jdk-updates-dev <jdk-updates-dev at openjdk.java.net>
    > Subject: [CAUTION] [11u] RFR(S): 8237474: Default SSLEngine should create in
    > server role
    >
    > Hi,
    >
    > I would like to downport this for parity with 11.0.8-oracle.
    > I had to resolve the copyrights.
    >
    > Further, in src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java,
    > method engineGetDefaultSSLParameters() is to be patched.
    >
    > engineGetDefaultSSLParameters() was introduced in 12 by "8209031:
    > SSLSocket should throw an exception when configuring DTLS"
    > https://bugs.openjdk.java.net/browse/JDK-8209031, which is implemented
    > in https://bugs.openjdk.java.net/browse/JDK-8208641.
    >
    > I dropped the change to this method as it's not in 11.
    >
    > http://cr.openjdk.java.net/~goetz/wr20/8237474-SSLEngine_server_role-
    > jdk11/01/
    >
    > original change:
    > https://bugs.openjdk.java.net/browse/JDK-8237474
    > https://hg.openjdk.java.net/jdk/jdk/rev/74384366ec1d
    >
    > Best regards,
    >   Goetz.