TLS extensions API, ALPN and HTTP 2.0

Simone Bordet simone.bordet at gmail.com
Wed Aug 20 11:03:02 UTC 2014


Hi,

On Tue, Aug 19, 2014 at 4:11 PM, Vincent Ryan <vincent.x.ryan at oracle.com> wrote:
> Hello Simone,
>
> Thanks for re-raising this issue. There are indeed plans to add support for ALPN in JDK 9 but they’re still at an
> early stage so the timing is good.
>
> We would be interested in examining your implementation to explore how it fits into the current TLS APIs.
> Removing the dependency on a boot class path setting is something we should address in JDK 9.
>
> Would you be interested in co-operating on defining a new public API in JDK 9 for ALPN usage in TLS?

Yes.

> Typically, we use the SSLParameters class to support setting the proposed TLS parameters and use the
> SSLSession class to support getting the negotiated TLS parameters. We could easily adopt a similar model
> for ALPN.

I'll have a look, although ALPN is a connection property rather than a
session property.

> Finally, please confirm that you have already signed the OCA [1]

I have not yet, it's running through legals ATM.
I'll notify when this is done.

Thanks !

-- 
Simone Bordet
http://bordet.blogspot.com
---
Finally, no matter how good the architecture and design are,
to deliver bug-free software with optimal performance and reliability,
the implementation technique must be flawless.   Victoria Livschitz


More information about the security-dev mailing list