[jdk17u-dev] RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite

[Goetz Lindenmaier]

On Mon, 21 Jul 2025 07:21:58 GMT, Matthias Baesken <mbaesken at openjdk.org> wrote:

>> I backport this for parity with 17.0.17-oracle
>> 
>> I assume it was backportet there. There is a CSR for 17, and follow up [JDK-8349583](https://bugs.openjdk.org/browse/JDK-8349583) was backported there. 
>> 
>> src/java.base/share/classes/sun/security/util/DisabledAlgorithmConstraints.java
>> Resolved imports.
>> 
>> test/jdk/sun/security/ssl/CipherSuite/NoDesRC4DesEdeCiphSuite.java
>> This file was added by https://bugs.openjdk.org/browse/JDK-8163327 in 19. Omitted.
>
> Looks okay , but the non existing test  has the name  NoDesRC4CiphSuite  in jdk17  (was moved to a new name NoDesRC4DesEdeCiphSuite in 19)  ; have you checked for potential need of adjusting this test ?

Hi @MBaesken 
Yes, the change can be applied to that test nicely. 
It basically refactors code to  superclass that is reused by the new tests.
Unclear whether it makes a difference for later backports.
I pushed an extra change with it, test passes.

-------------

PR Comment: https://git.openjdk.org/jdk17u-dev/pull/3775#issuecomment-3097675827