[jdk11u-dev] RFR: 8245545: Disable TLS_RSA cipher suites [v5]
David Sladký
duke at openjdk.org
Wed Dec 3 11:42:28 UTC 2025
On Wed, 3 Dec 2025 10:36:05 GMT, David Sladký <duke at openjdk.org> wrote:
>> Backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) - Disable TLS_RSA cipher suites
>>
>> Some TLS suites do not preserve forward-secrecy and are not commonly used - and should not be used.
>>
>> Not clean back port. This includes:
>> - Selection of disabled tests and some include that is in jdk11 but not in jdk17.
>> - Changed indentation of edited block of string defining disabled cipher suites.
>> - Bunch of copyright notices.
>>
>> Tested on Fedora 43:
>> - gtests passed
>> - T1 have same fails before and after the back port -> not related to this.
>> - jtreg:test/jdk/sun/security passed.
>> - jtreg:test/jdk/javax/net/ssl passed.
>> - Github Actions passed.
>
> David Sladký has updated the pull request incrementally with three additional commits since the last revision:
>
> - Revert undesired copyright change
> - Remove undesired indentation
> - Remove undesired refactor
The undesired access modifier change was reverted.
-------------
PR Comment: https://git.openjdk.org/jdk11u-dev/pull/3124#issuecomment-3606443385
More information about the jdk-updates-dev
mailing list