RFR[15] JDK-8243549: sun/security/ssl/CipherSuite/NamedGroupsWithCipherSuite.java failed with Unsupported signature algorithm: DSA

sha.jiang at oracle.com sha.jiang at oracle.com
Fri Apr 24 15:42:12 UTC 2020


Hi,
DHE_DSS cipher suites cannot work with SHA256withDSA (key size 2048) 
certificates over pre-TLSv1.2 protocols.
Please see JDK-8242928 for more details.

This fix takes the test to use a SHA1withDSA certificate (key size 1024) 
for TLSv1 and TLSv1.1.

Webrev: http://cr.openjdk.java.net/~jjiang/8243549/webrev.00/
Issue: https://bugs.openjdk.java.net/browse/JDK-8243549

Best regards,
John Jiang




More information about the security-dev mailing list