[PING] Re: [11u] RFR: 8202343: Disable TLS 1.0 and 1.1

Severin Gehwolf sgehwolf at redhat.com
Thu Jan 7 14:17:26 UTC 2021


Ping? Anyone?

On Fri, 2020-12-18 at 19:34 +0100, Severin Gehwolf wrote:
> Hi,
> 
> Please review this downport for disabling TLS 1.0 and 1.1 via the
> tls.disabledAlgorithms security property.
> 
> The JDK 16 patch didn't apply cleanly. The differences are context
> changes mostly. The hunk to TlsContextTest.java has been omitted since
> that test has been introduced with JDK 12+ (via JDK-8239594, not in JDK
> 11). Once reviewed and approved my intention is to push this together
> with follow-ups JDK-8256682 and JDK-8257083.
> 
> CSR for this is (reused from Oracle):
> https://bugs.openjdk.java.net/browse/JDK-8257122
> 
> Bug: https://bugs.openjdk.java.net/browse/JDK-8202343
> webrev: https://cr.openjdk.java.net/~sgehwolf/webrevs/JDK-8202343/01/webrev/
> 
> Testing: jdk_security tests. No regressions noted.
> 
> Thoughts?
> 
> Thanks,
> Severin




More information about the jdk-updates-dev mailing list