Backporting sun.security.ssl.ClientHandshaker change to jdk7u?
John.E.Gregg at wellsfargo.com
John.E.Gregg at wellsfargo.com
Wed May 20 02:56:53 UTC 2015
For my own education, where would I find the fix in Mercurial? I looked in jdk7u and jdk7u-dev but don't see it. For jdk8, I see it in jdk8u.
Thanks
John
-----Original Message-----
From: Seán Coffey [mailto:sean.coffey at oracle.com]
Sent: Tuesday, May 19, 2015 4:47 PM
To: Gregg, John E.; jdk7u-dev at openjdk.java.net
Subject: Re: Backporting sun.security.ssl.ClientHandshaker change to jdk7u?
John,
the change you're referring to seems to be
https://bugs.openjdk.java.net/browse/JDK-8075750
It's fixed for 7u85 which is an upcoming JDK release.
Regards,
Sean.
On 19/05/2015 22:31, John.E.Gregg at wellsfargo.com wrote:
> Hi all,
>
> On April 10 a change was committed to jdk8u that I'd like to see backported to jdk7u. The change set is a large one: http://hg.openjdk.java.net/jdk8u/jdk8u-dev/jdk/rev/ea62ea52af27. I don't know anything about the background of the change. The checkin comment just says "Merge." I don't know where it was merged from but it seems to be a bundle of unrelated changes.
>
> The substance of the change to sun.security.ssl.ClientHandshaker is to make the triple handshake fix check all subject alternate names of types "IP address" and "DNS" and not just the first of each. The current behavior, introduced in in 1.7.0_71 I think, is unnecessarily restrictive. I believe the change is just a single file.
>
> Thanks
>
>
> John Gregg
>
>
>
More information about the jdk7u-dev
mailing list