[jdk21u-dev] RFR: 8333857: Test sun/security/ssl/SSLSessionImpl/ResumeChecksServer.java failed: Existing session was used

[Goetz Lindenmaier]

On Thu, 4 Dec 2025 15:36:19 GMT, Matthias Baesken <mbaesken at openjdk.org> wrote:

>> I backport this for parity with 21.0.11-oracle.
>> 
>> Needed to resolve and adapt larger parts of ResumeChecksServer.java as https://bugs.openjdk.org/browse/JDK-8357033 is not in 21.
>
> test/jdk/sun/security/ssl/SSLSessionImpl/ResumeChecksServer.java line 253:
> 
>> 251:                             params.setAlgorithmConstraints(new NoSig(
>> 252:                                 first ? "ecdsa_secp521r1_sha512" :
>> 253:                                     "ecdsa_secp384r1_sha384"));
> 
> Seems those constraints ecdsa_secp521r1_sha512 / ecdsa_secp384r1_sha384  came in with https://bugs.openjdk.org/browse/JDK-8357033 .
> Have you checked if this is okay ?

Good catch, this is a change of JDK-8357033 I included here.
But I think the change is not really related to 8357033, but rather giving the test more recent ciphers.  They are both also available in 21.
We could probably use the old code (ecdsa/rsa), but maybe using the new ones is a good improvement?  It is unlikely 8357033 is backported.

-------------

PR Review Comment: https://git.openjdk.org/jdk21u-dev/pull/2494#discussion_r2602133179