Code Review Request, JDK-8167472, Chrome interop regression with JDK-8148516

Xuelei Fan at
Tue Oct 11 05:06:14 UTC 2016


Please review this update:

The root cause is that in the update of JDK-8148516, we removed some EC 
curves from the default supported EC curves list.  However, while select 
the preferable curves requested by the client side, the server does not 
check whether the curves are supported or not.  Actually, only supported 
EC curves should be selected.

I tested the patch with Chrome, and no new test is added.


More information about the security-dev mailing list