RFR [15] JDK-8242145, New System Properties to configure the TLS signature schemes

Sean Mullan sean.mullan at oracle.com
Wed Apr 15 19:44:28 UTC 2020


Should the CSR say what the default schemes are if the properties are 
not set? Also, are the schemes case-insensitive? Also, what is the 
behavior if there are syntax errors (ex: not using a comma) in the format?

--Sean

On 4/14/20 11:42 PM, Xuelei Fan wrote:
> ping ...
> 
> On 4/3/2020 4:13 PM, Xuelei Fan wrote:
>> Hi,
>>
>> Could I get the following update reviewed?
>>
>> Webrev: http://cr.openjdk.java.net/~xuelei/8242145/webrev.00/
>>
>> Bug: https://bugs.openjdk.java.net/browse/JDK-8242141
>> CSR: https://bugs.openjdk.java.net/browse/JDK-8242145
>> Release-note: https://bugs.openjdk.java.net/browse/JDK-8242147
>>
>> A third party's TLS implementation may not be able to handle a certain 
>> signature schemes, and cannot interop with JDK.  Although the 
>> implementation does not comply to TLS specifications, the impact could 
>> be significant if an application that uses the implementation is popular.
>>
>> Thanks,
>> Xuelei



More information about the security-dev mailing list