RFR: 8341346: Add support for exporting TLS Keying Material [v10]

Bradford Wetmore wetmore at openjdk.org
Fri May 16 21:34:52 UTC 2025


On Tue, 13 May 2025 13:07:18 GMT, Weijun Wang <weijun at openjdk.org> wrote:

>> It seems like it should be an exception, whatever you decide to do. The caller is asking for the keying material data, and the provider cannot fulfill that request, so I think explaining why it could not be done would be best represented in an exception.
>
> +1 for UOE. It's not that we got a key and found it un-extractable. It's that we asked for data but were refused.

I have updated to return a `UOE`.  

I'm a little concerned that `UOE` will be returned for both a non-overriden `exportKeyingMaterial*` method, and if there is a problem with the derivation.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24976#discussion_r2093696922


More information about the net-dev mailing list