Issues with ALPN implementation in JDK 9
Andrew Haley
aph at redhat.com
Wed Jun 15 08:03:39 UTC 2016
On 14/06/16 14:57, Simone Bordet wrote:
> * Lack of facilities to convert TLS protocol bytes to protocol strings.
> This class already exist in JDK, sun.security.ssl.ProtocolVersion, it
> would just need to be exposed in javax.net.ssl.
>
> * Lack of facilities to convert TLS cipher bytes to cipher name strings.
> As above, sun.security.ssl.CipherSuite exists, needs to be exposed publicly.
>
> Note that for the 2 bullets above, a recent message from Mark Reinhold
> to jdk9-dev confirmed that JDK 9 is *not yet* feature complete, so I
> hope they can be considered for inclusion.
It's very late, and they certainly won't be considered unless
someone proposes it. But can't we simply clone this class anyway?
Incidentally, I can't tell which (if any) of the issues you describe
are specific to JDK 9 (i.e. they would not be problems in JDK 8.)
Andrew.
More information about the security-dev
mailing list