Tls 1.2 support info

Seán Coffey sean.coffey at oracle.com
Mon Dec 4 10:38:58 UTC 2017


Information about the defaults used in the Oracle JDK 6u/7u releases can 
be found in the JDK Crypto roadmap :

https://www.java.com/en/jre-jdk-cryptoroadmap.html

Regards,
Sean.

On 30/11/17 16:53, rgamarra wrote:
> Thank you for your response Thomas.
>
> I'm connecting to a backend that will start to require tls 1.2. 
> Indeed, my question is general regarding tls 1.2 overall support.
>
> From your answer I understand that:
> - there's no update to open jdk 1.6 that supports tls 1.2.
> - open jdk 1.7 supports tls 1.2 since its initial release.
>
> It's not clear to me from your answer whether tls 1.2 is the default 
> option for any open jdk 1.7 version/update.
>
> In case it's not the default option, any advice on how to enable it 
> will be most helpful.
>
> Thanks.
>
> On Nov 30, 2017 12:47 PM, "Thomas Lußnig" <lussnig at suche.org 
> <mailto:lussnig at suche.org>> wrote:
>
>     Hi,
>
>     maybe you could tell more what you need to know about TLS 1.2 support?
>     Do you wan't an general overview of features (Stappling, SC, ...)
>     or are you
>     are you interested in the available cipher suites. If you are so
>     general the simple
>     answer is that TLS 1.2 is supported as client and server on open
>     jdk 1.7 at least.
>
>     Gruß Thomas
>
>     On 11/30/2017 3:43 PM, dalibor topic wrote:
>
>         On 30.11.2017 03:13, rgamarra wrote:
>
>             Hi there.
>
>             I'd like to ask about TLS 1.2 support in open jdk 1.6 and 1.7.
>
>         OpenJDK 6 and OpenJDK 7 are currently maintained by different
>         groups of maintainers. As such, I would suggest asking on the
>         individual
>         Project's mailing lists, i.e. jdk6-dev and jdk7u-dev.
>
>         cheers,
>         dalibor topic
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20171204/84ae18b6/attachment.htm>


More information about the security-dev mailing list