[jdk11u-dev] RFR: 8245545: Disable TLS_RSA cipher suites [v5]
David Sladký
duke at openjdk.org
Wed Dec 3 10:36:05 UTC 2025
> Backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) - Disable TLS_RSA cipher suites
>
> Some TLS suites do not preserve forward-secrecy and are not commonly used - and should not be used.
>
> Not clean back port. This includes:
> - Selection of disabled tests and some include that is in jdk11 but not in jdk17.
> - Changed indentation of edited block of string defining disabled cipher suites.
> - Bunch of copyright notices.
>
> Tested on Fedora 43:
> - gtests passed
> - T1 have same fails before and after the back port -> not related to this.
> - jtreg:test/jdk/sun/security passed.
> - jtreg:test/jdk/javax/net/ssl passed.
> - Github Actions passed.
David Sladký has updated the pull request incrementally with three additional commits since the last revision:
- Revert undesired copyright change
- Remove undesired indentation
- Remove undesired refactor
-------------
Changes:
- all: https://git.openjdk.org/jdk11u-dev/pull/3124/files
- new: https://git.openjdk.org/jdk11u-dev/pull/3124/files/95da7d4c..f43f57ec
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3124&range=04
- incr: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3124&range=03-04
Stats: 61 lines in 3 files changed: 0 ins; 8 del; 53 mod
Patch: https://git.openjdk.org/jdk11u-dev/pull/3124.diff
Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/3124/head:pull/3124
PR: https://git.openjdk.org/jdk11u-dev/pull/3124
More information about the jdk-updates-dev
mailing list