Code Review Request 8148108 Disable Diffie-Hellman keys less than 1024 bits

Xuelei Fan xuelei.fan at oracle.com
Fri Mar 4 11:53:27 UTC 2016


Hi,

Please review the update for JDK-8148108:
   http://cr.openjdk.java.net/~xuelei/8148108/webrev.00/

In this update, it is proposed to restrict the use of DH keys less than
1024 bits in length in the SSL/TLS/DTLS implementation in JDK 9.  This
restriction is applied via the Java Security property,
"jdk.tls.disabledAlgorithms".  This will impact providers that adhere to
this security property, for example, the SunJSSE provider.

Thanks,
Xuelei



More information about the security-dev mailing list