RFR: 8281561: Disable http DIGEST mechanism with MD5 and SHA-1 by default [v8]
Daniel Fuchs
dfuchs at openjdk.java.net
Mon Mar 28 11:28:45 UTC 2022
On Mon, 28 Mar 2022 10:30:56 GMT, Michael McMahon <michaelm at openjdk.org> wrote:
>> I am confused here - because you converted `algorithm` to upper case, so it should never end with `-sess`?
>
> Look at line 478: The `algorithm` field is reset here to be the upper case of the digest name plus the -sess suffix in lower case.
Doh! Somehow I'd read that as `digestName = digestName + "-sess"`.
All clear now.
-------------
PR: https://git.openjdk.java.net/jdk/pull/7688
More information about the net-dev
mailing list