RFR: 8270344: Session resumption errors

Sean Coffey coffeys at openjdk.java.net
Fri Aug 13 14:07:38 UTC 2021


Corner case where a session resumption can fail if the TLS server changes supported protocol versions in relation to a cached SSLSession. This is primarily an issue where the legacy TLS version is used in place of the newer "supported_versions" TLS extension.

-------------

Commit messages:
 - 8270344: Session resumption errors

Changes: https://git.openjdk.java.net/jdk/pull/5110/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=5110&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8270344
  Stats: 192 lines in 2 files changed: 192 ins; 0 del; 0 mod
  Patch: https://git.openjdk.java.net/jdk/pull/5110.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/5110/head:pull/5110

PR: https://git.openjdk.java.net/jdk/pull/5110



More information about the security-dev mailing list