RFR [14]: JDK-8235263, Aftermath of TLS 1.3 in Java 11 with wrapped IOExceptions
Xuelei Fan
xuelei.fan at oracle.com
Tue Dec 3 20:15:37 UTC 2019
Hi,
Could I get the following update reviewed?
http://cr.openjdk.java.net/~xuelei/8235263/webrev.00/
In the SunJSSE provider, IOExceptions in application output stream was
updated to be wrapped into SSLException so as to close underlying
connections automatically. However, there are compatibility impact
reported [1].
It is not a good solution to use specific exception and JSSE
implementation details to switch business flow. However, as applications
have used this way, we may want to fix the compatibility issue.
Simple fix, no new regression test. The HttpComponents community had
confirmed the patch [1].
Thanks,
Xuelei
[1]:
https://mail.openjdk.java.net/pipermail/security-dev/2019-December/020956.html
More information about the security-dev
mailing list