RFR: backport of JDK-8209916, JDK-8210334, JDK-8210846 to jdk11u

Xuelei Fan xuelei.fan at oracle.com
Fri Sep 21 14:20:53 UTC 2018


Looks fine to me.

Thanks,
Xuelei

On 9/20/2018 11:51 PM, Jamil Nimeh wrote:
> Hello all,
> 
> This review is for a backport of 3 TLS interoperability issues that have 
> come up over the past week or so.  These are already in jdk/jdk.  They 
> cover the following issues:
> 
>   * An NPE thrown during processing of the supported groups extension
>     with curves not enabled by default
>   * A problem processing client hellos where pre_shared_key and
>     psk_key_exchange_modes extensions are both omitted
>   * A problem where JSSE TLS clients send empty Certificate messages
>     during client certificate authentication
> 
> Webrev: 
> http://cr.openjdk.java.net/~jnimeh/reviews/jdk11u-tls-compat/webrev.01/
> 
> JBS Issues:
> https://bugs.openjdk.java.net/browse/JDK-8209916
> https://bugs.openjdk.java.net/browse/JDK-8210334
> https://bugs.openjdk.java.net/browse/JDK-8210846
> 
> Thanks,
> --Jamil



More information about the security-dev mailing list