[jdk11u-dev] RFR: 8279164: Disable TLS_ECDH_* cipher suites

Martin Balao mbalao at openjdk.org
Sat Jun 15 02:58:23 UTC 2024


On Tue, 11 Jun 2024 13:33:36 GMT, Martin Doerr <mdoerr at openjdk.org> wrote:

> Backport of [JDK-8279164](https://bugs.openjdk.org/browse/JDK-8279164). The version from 17u applies almost cleanly. Only java.security needed manual integration. The modified tests have passed.

Hi,

I'm a bit late here but want to ask if adding `SSL_RSA_WITH_3DES_EDE_CBC_SHA` to `disabled_ciphersuites` (`DisabledAlgorithms.java`) was a mistake, considering that [8163327](https://bugs.openjdk.org/browse/JDK-8163327) has not been backported to 11u.

Thanks.-

-------------

PR Comment: https://git.openjdk.org/jdk11u-dev/pull/2763#issuecomment-2169069397


More information about the jdk-updates-dev mailing list