[jdk13u-dev] RFR: 8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR

[Alexey Bakhtin]

On Wed, 25 Nov 2020 14:14:58 GMT, Sergey Chernyshev <github.com+6394632+sercher at openjdk.org> wrote:

> Hello,
> 
> I would like to create backports of 8233228 and 8172404 in 13u. The backports are already in production in 11u.
> 
> The proposed 8233228 patch is exactly the same as 15u version, except for Hunk #9 at line 258(299): 
> 
> [https://github.com/openjdk/jdk13u-dev/commit/edec2fc6d79678111f97fa9da81d3bc1d2010538#diff-499d805909084ecc06c50b4706f8a2b3ec70ab9aaf55d54a6156c518f85f1bd6](https://github.com/openjdk/jdk13u-dev/commit/edec2fc6d79678111f97fa9da81d3bc1d2010538#diff-499d805909084ecc06c50b4706f8a2b3ec70ab9aaf55d54a6156c518f85f1bd6)
> 
> in which the 8244479 is already applied. In comparison, the 15u version applies 8244479 on top of 8233228, so the changes are in reverse order. Otherwise there are no code / logic changes in the code.
> 
> The further step would be to submit the 8172404 backport in the subsequent PR, in which the 15u patch applies cleanly in 13u on top of the proposed 8233228.
> 
> Thank you.
> 
> Best regards,
> Sergey Chernyshev
> BellSoft

I'm not a reviewer but Looks Good To Me

-------------

PR: https://git.openjdk.java.net/jdk13u-dev/pull/32