RFR: 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled [v11]

Artur Barashev abarashev at openjdk.org
Thu Apr 17 13:26:08 UTC 2025


On Wed, 16 Apr 2025 22:03:07 GMT, Mark Powers <mpowers at openjdk.org> wrote:

>> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   Further optimization: remove unnecessary updates
>
> test/jdk/javax/net/ssl/HttpsURLConnection/CriticalSubjectAltName.java line 1:
> 
>> 1: /*
> 
> Import of `java.security.cert.Certificate` on line 54 is unnecessary. Yea I know it's not in your code.

Those tests are going to be re-worked soon, so I guess it all will be addressed:
https://bugs.openjdk.org/browse/JDK-8353738

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24425#discussion_r2048935586


More information about the net-dev mailing list