[8u] TLSv1.3 RFR: 8245476: Disable TLSv1.3 protocol in the ClientHello message by default

Alexey Bakhtin alexey at azul.com
Thu May 21 14:19:24 UTC 2020


Please review changes required to backport TLSv1.3 protocol from JDK11.0.7 to JDK8u

This is the ninth part of the backport discussed in the thread [1]

JBS task: https://bugs.openjdk.java.net/browse/JDK-8245476
Webrev: http://cr.openjdk.java.net/~abakhtin/tls1.3/8245466/8245476/webrev.v0/

This patch turns off TLSv1.3 protocol on the default client configuration.
TLSv1.3 still can be enabled on the client-side:
- via the existing SSLSocket/SSLEngine/SSLParameters/SSLContext API
- via the jdk.tls.client.protocols property
- via the https.protocols property

The patch should be applied after the patch for JDK-8245474

[1] - https://mail.openjdk.java.net/pipermail/jdk8u-dev/2020-May/011664.html

Regards
Alexey


More information about the jdk8u-dev mailing list