[jdk11u-dev] RFR: 8065422: Trailing dot in hostname causes TLS handshake to fail with SNI disabled

[Roman Marchenko]

On Mon, 12 Dec 2022 14:17:13 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

>> Clean backport
>> 
>> JDK11 has the same issue with processing host names for SNI. It'd be good to keep JDK11 up to date with the upstream. No risks.
>> 
>> Please note that new test added by the change fails for now because of the certs are expired in March, 2022. To fix this, there are additional JDK fixes being backported as dependant PRs
>> 
>> - #1575 
>> - #1576
>
> Hi @wkla
> please give reason why you backport and assess the risk in the JBS fix request comment.
> 
> I remove the fix-request tag in the meantime. Feel free to add again after giving the reason.

Hi @GoeLin 
I've updated both the PR and the bug with the reason description and risk assessment.

-------------

PR: https://git.openjdk.org/jdk11u-dev/pull/1574