[8u] RFR : TLSv1.3 protocol support

[Alexey Bakhtin]

Hi Martin,

Thank you. I’m agree with you. I have to synchronise location of the TLS regression tests. Otherwise it is easy to miss test updates and as result get some regression in the implementation.

As for errors you mentioned:
All tests ( except of CipherSuitesInOrder.java ) are marked as ignored in the JDK11.0.7 and new implementation, so it is expected failures. We have to wait test or implementation fixes in JDK11 and then backport them to JDK8.

CipherSuitesInOrder.java was ignored in the initial TLS1.3 implementation but fixed by JDK-8234728. I did not update it in the patch.
I will update it as part of TLS tests location refactoring.

Regards
Alexey

> On 20 May 2020, at 17:27, Martin Balao <mbalao at redhat.com> wrote:
> 
> 
> I've seen you did not replaced those files in JDK-8 -at least the 5
> files I compared have differences with their JDK-11 version-. My
> question is: how are we sure that we don't need updates from JDK-11? In
> particular, I wonder if we are preventing TLS 1.3 code to be exercised.
> And I'm also concerned about the failures there (list at the end of this
> mail [1]).
> 
> Thanks,
> Martin.-
> 
> --
> [1] -
> 
> Error:  sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/Basics.java
> Error:  sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/CheckStatus.java
> Error:  sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/ConnectionTest.java
> Error:
> sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/EngineCloseOnAlert.java
> Error:
> sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/IllegalHandshakeMessage.java
> Error:
> sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/IllegalRecordVersion.java
> Error:  sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/TestAllSuites.java
> FAILED: sun/security/ssl/javax/net/ssl/NewAPIs/CheckMyTrustedKeystore.java
> Error:  sun/security/ssl/sanity/ciphersuites/CipherSuitesInOrder.java
> Error:
> sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/CloseKeepAliveCached.java
>