Code review request: JDK-8046295 - Support Trusted CA Indication extension

Fri Jun 9 04:37:58 UTC 2017


On 6/8/2017 8:36 PM, Xuelei Fan wrote:
> The trusted authorities can be get from client trust manager.  Server 
> can choose the best matching of server certificate of the client 
> requested trusted authorities.
 >
I missed the point that the key manager need to know the client 
requested trusted authorities for the choosing.  So may need a new 
SSLSession attribute (See similar method in ExtendedSSLSession).

Xuelei