RFR JDK-8239595/JDK-8239594 : ssl context version is not respected/jdk.tls.client.protocols is not respected

Rahul rahul.r.yadav at oracle.com
Thu Apr 9 13:13:14 UTC 2020


Thanks for the review Daniel.
 I have created a release note.

    RN : https://bugs.openjdk.java.net/browse/JDK-8242387

--Rahul

On 08/04/2020, 16:00, "Daniel Fuchs" <daniel.fuchs at oracle.com> wrote:

    Good work Rahul!
    
    I am not sure whether that deserves a CSR (probably not) but we may
    want to create some release note to explain that the HttpClient is no
    longer overriding the default protocols selected by the SSLContext.
    
    So HTTP 1.1 over TLSv1.1 might now get negotiated where previously
    an handshake failure would have occurred. It might be worth mentioning
    in a release note.
    
    best regards,
    
    -- daniel
    
    On 08/04/2020 10:13, Rahul wrote:
    > Updated patch after considering the impact of returning default parameters on the http client.
    > TLS versions earlier limited to 1.2 and above by client, now will support all versions(wrt the scenarios for this bug).
    >      
    >      Issue:https://bugs.openjdk.java.net/browse/JDK-8239595
    >      Issue:https://bugs.openjdk.java.net/browse/JDK-8239594
    >      
    >      Webrev:http://cr.openjdk.java.net/~jboes/rayayada/webrevs/8239595/webrev.01/
    >      
    >      -- Rahul
    
    





More information about the security-dev mailing list