Backport of JDK-8293562 to JDK8

[Andrew Hughes]

On 16:47 Mon 27 Nov     , Dhamoder Nalla wrote:
> Hi All,
> 
> I'm a member of the Java Engineering Group at Microsoft, currently working on a TLS 1.3 issue for one of our customers using JDK8. This issue aligns with JDK-8293562<https://bugs.openjdk.org/browse/JDK-8293562>.
> This customer is currently not able to upgrade their JDK version, so I'm interested in understanding if there are any concerns about backporting this bug (JDK-8293562<https://bugs.openjdk.org/browse/JDK-8293562>) fix to JDK8 (or if this is already in progress by someone).
> 
> Thanks,
> Dhamoder.
> 
> 

It's difficult to give a definitive answer without seeing what the
backport would actually look like, how it may need to be modified for
8u and if any other backports are needed as well.

What I would say is that the TLS 1.3 support in 8u was recently
backported from 11u, so it is already code that is newer than most of
8u and similar to what it is in 11u. Given we already made a backport
of such a significant enhancement, I would say that bug fixes for it
have a lower bar than other changes elsewhere in the 8u code base.
The change also has a test case which is always a plus.

I'm not aware of any work on 8u already, though this ticket saw a lot
of interest when backporting to 11u with two competing PRs.  I would
say do the backport and propose a PR, but be aware that the end result
of that process could be that we decide not to go ahead, as some
changes are deemed too risky to 8u stability.

Hope that helps,
-- 
Andrew :)
Pronouns: he / him or they / them
Principal Free Java Software Engineer
OpenJDK Package Owner
Red Hat, Inc. (http://www.redhat.com)

PGP Key: ed25519/0xCFDA0F9B35964222 (hkp://keys.gnupg.net)
Fingerprint = 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222

Please contact via e-mail, not proprietary chat networks
Available on Libera Chat & OFTC IRC networks as gnu_andrew
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <https://mail.openjdk.org/pipermail/jdk8u-dev/attachments/20231128/6c502f20/signature.asc>