[jdk8u-dev] RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite [v2]

David Sladký duke at openjdk.org
Wed Feb 18 13:51:26 UTC 2026


> Backport of [JDK-8341964](https://bugs.openjdk.org/browse/JDK-8341964) - Add mechanism to disable different parts of TLS cipher suite
> 
> Preparation for backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) to comply with [Oracle JRE and JDK Cryptographic Roadmap](https://www.java.com/en/jre-jdk-cryptoroadmap.html)
> 
> Extra changes compared to corresponding backport in jdk11:
> - in `jdk/test/sun/security/ssl/CipherSuite/TLSCipherSuiteWildCardMatchingDisablePartsOfCipherSuite.java` on line 58 changed `List.of()` to `Array.asList()` (and added import for it) because the former is not supported by jdk8.
> 
> ## Tests
> 
> Tested on RHEL9.
> 
> ### Tier 1
> 
> 
> -------------- Test Summary ------------
> 
> Summary: jdk_tier1
> TEST STATS: name=jdk_tier1  run=1341  pass=1341  fail=0
> 
> Summary: langtools_tier1
> FAILED: tools/javac/lambda/LambdaLambdaSerialized.java
> TEST STATS: name=langtools_tier1  run=3121  pass=3120  fail=1
> 
> Summary: hotspot_tier1
> TEST STATS: name=hotspot_tier1  run=808  pass=808  fail=0
> 
> I rerun the failed test and it passed:
> 
> /root/jtreg/bin/jtreg -jdk:build/linux-x86_64-normal-server-release/images/j2sdk-image -Xmx768m langtools/test/tools/javac/lambda/LambdaLambdaSerialized.java
> Test results: passed: 1
> 
> 
> ### sun/security
> 
> 
> Summary:
> FAILED: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
> FAILED: sun/security/pkcs11/Provider/Login.sh
> FAILED: sun/security/pkcs11/Signature/TestDSAKeyLength.java
> FAILED: sun/security/tools/keytool/autotest.sh
> 
> 
> These same tests fail both in master and backport branch. I assume this is unrelated to this backport.
> 
> ### GHA
> 
> Passes.

David Sladký has updated the pull request incrementally with one additional commit since the last revision:

  Included requested changes from PR
  
  Changed Array.asList() to Utils.listOf()
  
  Propagated changes from `java.security-macosx` to other relevant files.
  
  Included omitted changes to
  jdk/test/sun/security/ssl/CipherSuite/NoDesRC4CiphSuite.java

-------------

Changes:
  - all: https://git.openjdk.org/jdk8u-dev/pull/763/files
  - new: https://git.openjdk.org/jdk8u-dev/pull/763/files/af722f9a..67d5d50c

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=763&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=763&range=00-01

  Stats: 289 lines in 6 files changed: 23 ins; 253 del; 13 mod
  Patch: https://git.openjdk.org/jdk8u-dev/pull/763.diff
  Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/763/head:pull/763

PR: https://git.openjdk.org/jdk8u-dev/pull/763


More information about the jdk8u-dev mailing list