[jdk8u-dev] RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite
David Sladký
duke at openjdk.org
Tue Feb 17 12:13:16 UTC 2026
Backport of [JDK-8341964](https://bugs.openjdk.org/browse/JDK-8341964) - Add mechanism to disable different parts of TLS cipher suite
Preparation for backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) to comply with [Oracle JRE and JDK Cryptographic Roadmap](https://www.java.com/en/jre-jdk-cryptoroadmap.html)
Extra changes compared to corresponding backport in jdk11:
- in `jdk/test/sun/security/ssl/CipherSuite/TLSCipherSuiteWildCardMatchingDisablePartsOfCipherSuite.java` on line 58 changed `List.of()` to `Array.asList()` (and added import for it) because the former is not supported by jdk8.
## Tests
Tested on RHEL9.
### Tier 1
-------------- Test Summary ------------
Summary: jdk_tier1
TEST STATS: name=jdk_tier1 run=1341 pass=1341 fail=0
Summary: langtools_tier1
FAILED: tools/javac/lambda/LambdaLambdaSerialized.java
TEST STATS: name=langtools_tier1 run=3121 pass=3120 fail=1
Summary: hotspot_tier1
TEST STATS: name=hotspot_tier1 run=808 pass=808 fail=0
I rerun the failed test and it passed:
/root/jtreg/bin/jtreg -jdk:build/linux-x86_64-normal-server-release/images/j2sdk-image -Xmx768m langtools/test/tools/javac/lambda/LambdaLambdaSerialized.java
Test results: passed: 1
### sun/security
Summary:
FAILED: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
FAILED: sun/security/pkcs11/Provider/Login.sh
FAILED: sun/security/pkcs11/Signature/TestDSAKeyLength.java
FAILED: sun/security/tools/keytool/autotest.sh
These same tests fail both in master and backport branch. I assume this is unrelated to this backport.
### GHA
Passes.
-------------
Commit messages:
- backport 37f8029d4e64937e648784466acf9383d522543e
Changes: https://git.openjdk.org/jdk8u-dev/pull/763/files
Webrev: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=763&range=00
Issue: https://bugs.openjdk.org/browse/JDK-8341964
Stats: 511 lines in 5 files changed: 506 ins; 2 del; 3 mod
Patch: https://git.openjdk.org/jdk8u-dev/pull/763.diff
Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/763/head:pull/763
PR: https://git.openjdk.org/jdk8u-dev/pull/763
More information about the jdk8u-dev
mailing list