[jdk11u-dev] RFR: 8256660: Disable DTLS 1.0 [v5]

[Matthias Baesken]

On Wed, 10 Apr 2024 19:56:36 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

>> I backport this for parity with 11.0.24-oracle.
>> 
>> Trivial resolve in java.security
>> 
>> Update:
>> Two test were failing with this change: javax/net/ssl/DTLS/InvalidRecords.java and javax/net/ssl/DTLS/NoMacInitialClientHello.java. Thanks to Sean Mullan who pointed me to the fix, see also 
>> https://bugs.openjdk.org/browse/JDK-8326020
>
> Goetz Lindenmaier has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Fix failing tests.

Seems there are quite a lot of  tests  at  test/jdk  where  'jdk.tls.disabledAlgorithms'  is set to a small number of disabled algorithms .  Those settings were probably fine a long time ago, but for some of them it might make sense to review, if it would make sense to add more disabled algs that were add in the meantime .
But this is of course out of scope of this backport .

-------------

PR Comment: https://git.openjdk.org/jdk11u-dev/pull/2584#issuecomment-2051801650