[jdk11u-dev] RFR: 8245545: Disable TLS_RSA cipher suites

Mangovnik duke at openjdk.org
Thu Nov 20 15:18:08 UTC 2025


Backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) - Disable TLS_RSA cipher suites

Some TLS suites do not preserve forward-secrecy and are not commonly used - and should not be used.

Not clean back port. This includes:
- Selection of disabled tests and some include that is in jdk11 but not in jdk17.
- Changed indentation of edited block of string defining disabled cipher suites.
- Bunch of copyright notices.

Tested on Fedora 43:
- gtests passed
- T1 have same fails before and after the back port -> not related to this.
- jtreg:test/jdk/sun/security passed.

Github Actions passed.

-------------

Depends on: https://git.openjdk.org/jdk11u-dev/pull/3123

Commit messages:
 - backport b838ae0a7bbe34f345a4d56af21df4badce0caf2

Changes: https://git.openjdk.org/jdk11u-dev/pull/3124/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk11u-dev&pr=3124&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8245545
  Stats: 137 lines in 13 files changed: 44 ins; 18 del; 75 mod
  Patch: https://git.openjdk.org/jdk11u-dev/pull/3124.diff
  Fetch: git fetch https://git.openjdk.org/jdk11u-dev.git pull/3124/head:pull/3124

PR: https://git.openjdk.org/jdk11u-dev/pull/3124


More information about the jdk-updates-dev mailing list