RFR: backport of JDK-8209916, JDK-8210334, JDK-8210846 to jdk11u

Bradford Wetmore bradford.wetmore at oracle.com
Fri Sep 21 21:22:19 UTC 2018


Looks fine.

Where are your new regression tests for 916/334?  Will that be under a 
separate bug?

Thanks.

Brad



On 9/20/2018 11:51 PM, Jamil Nimeh wrote:
> Hello all,
> 
> This review is for a backport of 3 TLS interoperability issues that have 
> come up over the past week or so.  These are already in jdk/jdk.  They 
> cover the following issues:
> 
>   * An NPE thrown during processing of the supported groups extension
>     with curves not enabled by default
>   * A problem processing client hellos where pre_shared_key and
>     psk_key_exchange_modes extensions are both omitted
>   * A problem where JSSE TLS clients send empty Certificate messages
>     during client certificate authentication
> 
> Webrev: 
> http://cr.openjdk.java.net/~jnimeh/reviews/jdk11u-tls-compat/webrev.01/
> 
> JBS Issues:
> https://bugs.openjdk.java.net/browse/JDK-8209916
> https://bugs.openjdk.java.net/browse/JDK-8210334
> https://bugs.openjdk.java.net/browse/JDK-8210846
> 
> Thanks,
> --Jamil



More information about the security-dev mailing list