[jdk11u-dev] RFR: 8190492: Remove SSLv2Hello and SSLv3 from default enabled TLS protocols

Matthias Baesken mbaesken at openjdk.org
Thu Mar 2 10:37:24 UTC 2023


On Wed, 1 Mar 2023 14:55:25 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

> I backport this for parity with 11.0.19-oracle. At least we found the corresponding CSR, the backport seems to be closed.
> 
> I had to adapt the code as 11 implements FIPS.

Marked as reviewed by mbaesken (Reviewer).

Hi Götz , looks like there is a comment missing in SSLContextImpl.java (last part of the diffs in the file)
// default server protocols
Otherwise looks okay .

-------------

PR: https://git.openjdk.org/jdk11u-dev/pull/1787


More information about the jdk-updates-dev mailing list