RFR[10] 8186057: TLS interoperability testing between different Java versions

sha.jiang at oracle.com sha.jiang at oracle.com
Thu Sep 7 08:24:10 UTC 2017


Hi Artem,

On 07/09/2017 16:07, Artem Smotrakov wrote:
>>
>>> - Please use try-with-resources if possible (files, sockets, etc)
>> The test uses only JDK 6-supported language features, but 
>> try-with-resources is introduced by JDK 7.
> Here we come to another issue. I believe that it would be good to use 
> write clients for all JDK versions. If you use the same code for all 
> Java versions, that means that you use only JDK 6 API. Let's consider 
> the following:
> - we want to test 8 vs 9
> - 8 and 9 may have some API (or just functionality) which is not 
> supported by 6 (for example, ALPN, SNI)
>
> If you write code which is compatible with 6, then you can use API 
> from newer versions, but we still may want to test it.
In fact, the current test has already covered ALPN, though only JDK 9 
and 10 support the associated methods, like 
SSLParameters.getApplicationProtocols().
ALPN-associated case combinations are ignored if a JDK doesn't support 
this feature. Exactly, JdkUtils checks if a specific JDK build contains 
method SSLParameters.getApplicationProtocols().
I think the same approach could be applied for SNI in the future.

Best regards,
John Jiang
>
> Artem
>>
>> Best regards,
>> John Jiang
>>>
>>> Artem
>>>
>>> On 09/07/2017 08:52 AM, sha.jiang at oracle.com wrote:
>>>> Hi,
>>>> Please review this test for checking the interop compatibility on 
>>>> JSSE among different JDK releases (from 6 to 10).
>>>> It covers the cases, like handshake, data exchange, client 
>>>> authentication and APLN, on all TLS versions (if possible).
>>>> And the selected TLS cipher suites are: 
>>>> TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA and 
>>>> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA.
>>>> For more details, please look though the README.
>>>>
>>>> Webrev: http://cr.openjdk.java.net/~jjiang/8186057/webrev.00
>>>> Issue: https://bugs.openjdk.java.net/browse/JDK-8186057
>>>>
>>>> Best regards,
>>>> John Jiang
>>>>
>>>
>>>
>>
>
>



More information about the security-dev mailing list