8190917: SSL session resumption broken for protocols other than TLSv1.2
Jaikiran Pai
jai.forums2013 at gmail.com
Fri Nov 10 05:00:40 UTC 2017
(Moved from jdk9-dev list[1] to here)
I would like to contribute a patch, containing a potential fix and a
test case, to the issue reported at
https://bugs.openjdk.java.net/browse/JDK-8190917. This is going to be my
first contribution to OpenJDK, so I would need some guidance/help in
having this reviewed/merged, please.
To give a quick overview of this specific bug - the issue relates to SSL
session resumption which is no longer functional in Java 9 for SSL
protocols other than TLSv1.2. The JIRA itself has more extensive details
and a test case which reproduces the issue.
So far, I have followed various documentation to setup and build OpenJDK
locally. I have completed the following set of basic tasks:
- Checked out the mercurial repo for jdk
(http://hg.openjdk.java.net/jdk/jdk)
- Built the JDK locally, following the instructions under
doc/building.md
- Run some of the basic tests successfully
I have also signed and submitted the Oracle Contributor Agreement in a
mail a few hours back.
Right now I have the patch with the potential fix ready and also have a
(jtreg) testcase which reproduces the issue and verifies the bug fix. I
would like to understand what my next steps should be. More specifically:
1. How do I initiate a review of the proposed change? Should I
start a new discussion, in this very mailing list, with the subject line
having [PATCH], an attachment with the patch and the details about the
change? Or should I be attaching the proposed change in this current
discussion itself?
2. The "How to contribute" guide states "Your patch must be built
and tested on all relevant platforms before submission." I use Mac OS
for development and that's the only system I have access to. Would I be
required to test this change on other *nix and Windows OS?
[1]
http://mail.openjdk.java.net/pipermail/jdk9-dev/2017-November/006050.html
[2] http://openjdk.java.net/contribute/
-Jaikiran
More information about the security-dev
mailing list