RFR: 8341346: Add support for exporting TLS Keying Material [v27]
Hai-May Chao
hchao at openjdk.org
Thu May 29 23:49:53 UTC 2025
On Thu, 29 May 2025 00:54:37 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:
>> Adds the RFC 5705/8446 TLS Key Exporters API/implementation to JSSE/SunJSSE respectively.
>>
>> CSR is complete/approved.
>>
>> Tests include new unit tests for TLSv1-1.3. Have run tier1-2, plus the JCK API (jck:api/java_security jck:api/javax_crypto jck:api/javax_net jck:api/javax_security jck:api/org_ietf jck:api/javax_xml/crypto)
>
> Bradford Wetmore has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains 37 commits:
>
> - Merge branch 'master' into JDK-8341346
> - Remove TlsExporterKeyingMaterial for now. Can add later if needed.
> - Merge branch 'master' into JDK-8341346
> - Merge branch 'master' into JDK-8341346
> - Added PKCS11 testing
> - Minor bug
> - Missed one change
> - Merge branch 'master' into JDK-8341346
> - Private Codereview comment: Don't allow use of null keyAlgs, plus some minor cleanups
> - get*() no longer needed, backout error (oops!)
> - ... and 27 more: https://git.openjdk.org/jdk/compare/2ec6ab34...858362c8
Marked as reviewed by hchao (Reviewer).
-------------
PR Review: https://git.openjdk.org/jdk/pull/24976#pullrequestreview-2879841654
More information about the net-dev
mailing list