[jdk8u-dev] RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite
David Sladký
duke at openjdk.org
Tue Dec 2 15:42:23 UTC 2025
Backport of [JDK-8341964](https://bugs.openjdk.org/browse/JDK-8341964) - Add mechanism to disable different parts of TLS cipher suite
Preparation for backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) to comply with [Oracle JRE and JDK Cryptographic Roadmap](https://www.java.com/en/jre-jdk-cryptoroadmap.html)
Tested in RHEL9 VM:
- Not clean backport.
- Passed T1 tests.
- `jdk_security` tests -> 4 fails. Same fails before and after backport. They are unrelated. Probably some incorrect set up in my VM. The failing tests:
- sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
- sun/security/pkcs11/Provider/Login.sh
- sun/security/pkcs11/Signature/TestDSAKeyLength.java
- sun/security/tools/keytool/autotest.sh
- GHA -> Linux x86/x64 hotspot/tier1 failing, seems unrelated to this backport, same fails in other already closed and integrated PRs
Extra changes:
- in `jdk/test/sun/security/ssl/CipherSuite/TLSCipherSuiteWildCardMatchingDisablePartsOfCipherSuite.java` on line 58 changed `List.of()` to `Array.asList()` (and added import for it) because the former is not supported by jdk8.
-------------
Commit messages:
- backport 37f8029d4e64937e648784466acf9383d522543e
Changes: https://git.openjdk.org/jdk8u-dev/pull/730/files
Webrev: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=730&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8341964
Stats: 512 lines in 5 files changed: 506 ins; 2 del; 4 mod
Patch: https://git.openjdk.org/jdk8u-dev/pull/730.diff
Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/730/head:pull/730
PR: https://git.openjdk.org/jdk8u-dev/pull/730
More information about the jdk8u-dev
mailing list