[jdk8u-dev] RFR: 8065422: Trailing dot in hostname causes TLS handshake to fail with SNI disabled [v2]

Roman Marchenko rmarchenko at openjdk.org
Wed Jan 18 07:29:46 UTC 2023


> Actually clean backport.
> 
> JDK8 has the same issue with processing host names for SNI. It'd be good to keep JDK8 up to date with the upstream. No risks.
> 
> There were 2 conflicts with test files paths:
> 
> - Original `test/jdk/javax/net/ssl/ServerName/EndingDotHostname.java` added and moved to `jdk/test/javax/net/ssl/ServerName/EndingDotHostname.java`.
> - Original `test/jdk/javax/net/ssl/templates/SSLExampleCert.java` added and moved to `jdk/test/javax/net/ssl/templates/SSLExampleCert.java`.
> 
> Please note that new test added by the change fails for now because of the certs are expired in March, 2022. To fix this, there are additional JDK fixes being backported as dependant PRs
> 
> - #206 
> - #207

Roman Marchenko has updated the pull request incrementally with one additional commit since the last revision:

  Fixed strings format

-------------

Changes:
  - all: https://git.openjdk.org/jdk8u-dev/pull/205/files
  - new: https://git.openjdk.org/jdk8u-dev/pull/205/files/84cd2b55..08f949b2

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=205&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=205&range=00-01

  Stats: 213 lines in 1 file changed: 63 ins; 66 del; 84 mod
  Patch: https://git.openjdk.org/jdk8u-dev/pull/205.diff
  Fetch: git fetch https://git.openjdk.org/jdk8u-dev pull/205/head:pull/205

PR: https://git.openjdk.org/jdk8u-dev/pull/205


More information about the jdk8u-dev mailing list