RFR: 8341346: Add support for exporting TLS Keying Material [v16]
Bradford Wetmore
wetmore at openjdk.org
Fri May 16 01:28:56 UTC 2025
> Adds the RFC 5705/8446 TLS Key Exporters API/implementation to JSSE/SunJSSE respectively.
>
> CSR is underway.
>
> Tests include new unit tests for TLSv1-1.3. Will run tier1-2, plus the JCK API (jck:api/java_security jck:api/javax_crypto jck:api/javax_net jck:api/javax_security jck:api/org_ietf jck:api/javax_xml/crypto)
Bradford Wetmore has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 23 commits:
- Merge branch 'master' into JDK-8341346
- Minor Codereview comments.
- Codereview comments: updated test to extend from SSLEngineTemplate, API tweaks, couple small bugs
- Codereview comments: updated test to extend from SSLEngineTemplate, API tweaks, couple small bugs
- Codereview: removed serialization of of exporter Secret/randoms, and adjusted TLSv1-1.2 randoms capture locations since mastersecret could be reused
- Merged with changes for JDK-8353578
- Merge
- Merge branch 'master' into JDK-8341346
- Missed one review comment
- More codereview comments
- ... and 13 more: https://git.openjdk.org/jdk/compare/f6b0f016...e93e38e4
-------------
Changes: https://git.openjdk.org/jdk/pull/24976/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=24976&range=15
Stats: 947 lines in 6 files changed: 933 ins; 2 del; 12 mod
Patch: https://git.openjdk.org/jdk/pull/24976.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/24976/head:pull/24976
PR: https://git.openjdk.org/jdk/pull/24976
More information about the net-dev
mailing list