RFR: 8255867: SignatureScheme JSSE property does not preserve ordering in handshake messages [v3]

Jamil Nimeh jnimeh at openjdk.java.net
Mon Feb 22 21:28:57 UTC 2021


> This fix adjusts the SunJSSE provider's handling of the jdk.tls.[client | server].SignatureSchemes property and its effect on messages that assert the signature_algorithms and signature_algorithms_cert extensions, or supported_signature_algorithms vectors like those used in TLS 1.2 CertificateRequest messages.  With this change, the ordering of the signature algorithms in the property value will be preserved in the ordering as integer identifiers in the messages itself.  Prior to this fix the property algorithms will be asserted, but in the order as shown in the sun.security.ssl.SignatureAlgorithms enumeration.
> 
> This does not affect the default ordering of these signature schemes when the property is not given a value.
> 
> JBS: https://bugs.openjdk.java.net/browse/JDK-8255867

Jamil Nimeh has updated the pull request incrementally with one additional commit since the last revision:

  Fix indentation, make test a derivation of SSLEngineTemplate

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/2658/files
  - new: https://git.openjdk.java.net/jdk/pull/2658/files/9b9d967f..20498ee3

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=2658&range=02
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=2658&range=01-02

  Stats: 88 lines in 3 files changed: 12 ins; 49 del; 27 mod
  Patch: https://git.openjdk.java.net/jdk/pull/2658.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/2658/head:pull/2658

PR: https://git.openjdk.java.net/jdk/pull/2658



More information about the security-dev mailing list