[jdk8u-dev] RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite [v5]

[Severin Gehwolf]

On Mon, 23 Feb 2026 09:07:26 GMT, David Sladký <duke at openjdk.org> wrote:

>> Backport of [JDK-8341964](https://bugs.openjdk.org/browse/JDK-8341964) - Add mechanism to disable different parts of TLS cipher suite
>> 
>> Preparation for backport of [JDK-8245545](https://bugs.openjdk.org/browse/JDK-8245545) to comply with [Oracle JRE and JDK Cryptographic Roadmap](https://www.java.com/en/jre-jdk-cryptoroadmap.html)
>> 
>> Extra changes compared to corresponding backport in jdk11:
>> - in `jdk/test/sun/security/ssl/CipherSuite/TLSCipherSuiteWildCardMatchingDisablePartsOfCipherSuite.java` on line 58 changed `List.of()` to `Array.asList()` (and added import for it) because the former is not supported by jdk8.
>> 
>> ## Tests
>> 
>> Tested on RHEL9.
>> 
>> ### Tier 1
>> 
>> 
>> -------------- Test Summary ------------
>> 
>> Summary: jdk_tier1
>> TEST STATS: name=jdk_tier1  run=1341  pass=1341  fail=0
>> 
>> Summary: langtools_tier1
>> FAILED: tools/javac/lambda/LambdaLambdaSerialized.java
>> TEST STATS: name=langtools_tier1  run=3121  pass=3120  fail=1
>> 
>> Summary: hotspot_tier1
>> TEST STATS: name=hotspot_tier1  run=808  pass=808  fail=0
>> 
>> I rerun the failed test and it passed:
>> 
>> /root/jtreg/bin/jtreg -jdk:build/linux-x86_64-normal-server-release/images/j2sdk-image -Xmx768m langtools/test/tools/javac/lambda/LambdaLambdaSerialized.java
>> Test results: passed: 1
>> 
>> 
>> ### sun/security
>> 
>> 
>> Summary:
>> FAILED: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh
>> FAILED: sun/security/pkcs11/Provider/Login.sh
>> FAILED: sun/security/pkcs11/Signature/TestDSAKeyLength.java
>> FAILED: sun/security/tools/keytool/autotest.sh
>> 
>> 
>> These same tests fail both in master and backport branch. I assume this is unrelated to this backport.
>> 
>> ### GHA
>> 
>> Passes.
>
> David Sladký has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Missing comment changes.

Marked as reviewed by sgehwolf (Reviewer).

-------------

PR Review: https://git.openjdk.org/jdk8u-dev/pull/763#pullrequestreview-3840263695