Integrated: 8270344: Session resumption errors

Sean Coffey coffeys at openjdk.java.net
Fri Aug 20 20:14:32 UTC 2021


On Fri, 13 Aug 2021 14:00:45 GMT, Sean Coffey <coffeys at openjdk.org> wrote:

> Corner case where a session resumption can fail if the TLS server changes supported protocol versions in relation to a cached SSLSession. This is primarily an issue where the legacy TLS version is used in place of the newer "supported_versions" TLS extension.

This pull request has now been integrated.

Changeset: 04a806ec
Author:    Sean Coffey <coffeys at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/04a806ec86a388b8de31d42f904c4321beb69e14
Stats:     185 lines in 4 files changed: 162 ins; 21 del; 2 mod

8270344: Session resumption errors

Reviewed-by: xuelei

-------------

PR: https://git.openjdk.java.net/jdk/pull/5110



More information about the security-dev mailing list