Integrated: 8270344: Session resumption errors
Sean Coffey
coffeys at openjdk.java.net
Fri Aug 20 20:14:32 UTC 2021
On Fri, 13 Aug 2021 14:00:45 GMT, Sean Coffey <coffeys at openjdk.org> wrote:
> Corner case where a session resumption can fail if the TLS server changes supported protocol versions in relation to a cached SSLSession. This is primarily an issue where the legacy TLS version is used in place of the newer "supported_versions" TLS extension.
This pull request has now been integrated.
Changeset: 04a806ec
Author: Sean Coffey <coffeys at openjdk.org>
URL: https://git.openjdk.java.net/jdk/commit/04a806ec86a388b8de31d42f904c4321beb69e14
Stats: 185 lines in 4 files changed: 162 ins; 21 del; 2 mod
8270344: Session resumption errors
Reviewed-by: xuelei
-------------
PR: https://git.openjdk.java.net/jdk/pull/5110
More information about the security-dev
mailing list