RFR: 8341346: Add support for exporting TLS Keying Material [v18]
Hai-May Chao
hchao at openjdk.org
Mon May 19 15:10:55 UTC 2025
On Sat, 17 May 2025 00:03:10 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:
>> Adds the RFC 5705/8446 TLS Key Exporters API/implementation to JSSE/SunJSSE respectively.
>>
>> CSR is underway.
>>
>> Tests include new unit tests for TLSv1-1.3. Will run tier1-2, plus the JCK API (jck:api/java_security jck:api/javax_crypto jck:api/javax_net jck:api/javax_security jck:api/org_ietf jck:api/javax_xml/crypto)
>
> Bradford Wetmore has updated the pull request incrementally with one additional commit since the last revision:
>
> Updated copyright dates.
src/java.base/share/classes/sun/security/ssl/SSLSessionImpl.java line 746:
> 744: return serverRandom;
> 745: }
> 746:
It looks like these getters (`getExporterMasterSecret(`), `getClientRandom()`, and `getServerRandom()`) are not used yet outside of this class.
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/24976#discussion_r2095927197
More information about the net-dev
mailing list