RFR: 8281561: Disable http DIGEST mechanism with MD5 and SHA-1 by default [v8]

Daniel Fuchs dfuchs at openjdk.java.net
Mon Mar 28 11:28:45 UTC 2022


On Mon, 28 Mar 2022 10:30:56 GMT, Michael McMahon <michaelm at openjdk.org> wrote:

>> I am confused here - because you converted `algorithm` to upper case, so it should never end with `-sess`?
>
> Look at line 478: The `algorithm` field is reset here to be the upper case of the digest name plus the -sess suffix in lower case.

Doh! Somehow I'd read that as `digestName = digestName + "-sess"`.
All clear now.

-------------

PR: https://git.openjdk.java.net/jdk/pull/7688


More information about the net-dev mailing list