[jdk8u-dev] RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite [v3]
David Sladký
duke at openjdk.org
Wed Feb 18 16:37:10 UTC 2026
> Backport of [JDK-8341964](https://bugs.openjdk.org/browse/JDK-8341964) - Add mechanism to disable different parts of TLS cipher suite
>
> Preparation for backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) to comply with [Oracle JRE and JDK Cryptographic Roadmap](https://www.java.com/en/jre-jdk-cryptoroadmap.html)
>
> Extra changes compared to corresponding backport in jdk11:
> - in `jdk/test/sun/security/ssl/CipherSuite/TLSCipherSuiteWildCardMatchingDisablePartsOfCipherSuite.java` on line 58 changed `List.of()` to `Array.asList()` (and added import for it) because the former is not supported by jdk8.
>
> ## Tests
>
> Tested on RHEL9.
>
> ### Tier 1
>
>
> -------------- Test Summary ------------
>
> Summary: jdk_tier1
> TEST STATS: name=jdk_tier1 run=1341 pass=1341 fail=0
>
> Summary: langtools_tier1
> FAILED: tools/javac/lambda/LambdaLambdaSerialized.java
> TEST STATS: name=langtools_tier1 run=3121 pass=3120 fail=1
>
> Summary: hotspot_tier1
> TEST STATS: name=hotspot_tier1 run=808 pass=808 fail=0
>
> I rerun the failed test and it passed:
>
> /root/jtreg/bin/jtreg -jdk:build/linux-x86_64-normal-server-release/images/j2sdk-image -Xmx768m langtools/test/tools/javac/lambda/LambdaLambdaSerialized.java
> Test results: passed: 1
>
>
> ### sun/security
>
>
> Summary:
> FAILED: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
> FAILED: sun/security/pkcs11/Provider/Login.sh
> FAILED: sun/security/pkcs11/Signature/TestDSAKeyLength.java
> FAILED: sun/security/tools/keytool/autotest.sh
>
>
> These same tests fail both in master and backport branch. I assume this is unrelated to this backport.
>
> ### GHA
>
> Passes.
David Sladký has updated the pull request incrementally with one additional commit since the last revision:
Added missing backslashes
-------------
Changes:
- all: https://git.openjdk.org/jdk8u-dev/pull/763/files
- new: https://git.openjdk.org/jdk8u-dev/pull/763/files/67d5d50c..98d66bc7
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=763&range=02
- incr: https://webrevs.openjdk.org/?repo=jdk8u-dev&pr=763&range=01-02
Stats: 4 lines in 4 files changed: 0 ins; 0 del; 4 mod
Patch: https://git.openjdk.org/jdk8u-dev/pull/763.diff
Fetch: git fetch https://git.openjdk.org/jdk8u-dev.git pull/763/head:pull/763
PR: https://git.openjdk.org/jdk8u-dev/pull/763
More information about the jdk8u-dev
mailing list