Allow to define the list of enabled named curves for EC cipher suites as Security Property

[Christian Schaefer]

Hi all,

Today, the list of enabled named curves for EC cipher suites can be specified as "System Property" (name of the system property is jdk.tls.namedGroups) in JDK 8 and later. It seems like it cannot be specified as "Security Property". So unlike jdk.tls.disabledAlgorithms and jdk.certpath.disabledAlgorithms the property jdk.tls.namedGroups cannot be specified in the security properties file (i.e. lib/security/java.security).

Is there any chance to enhance this in a future version so that jdk.tls.namedGroups can also be specified in the security properties file or is there a reason which I don't see that explains why jdk.tls.namedGroups can only be specified as System Property?

Regards,

Christian.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20190819/6e6833da/attachment.htm>