RFR: JDK-8262509: JSSE Server should check the legacy version in TLSv1.3 ClientHello

Xue-Lei Andrew Fan xuelei at openjdk.java.net
Mon Mar 1 16:11:52 UTC 2021


On Mon, 1 Mar 2021 03:07:12 GMT, John Jiang <jjiang at openjdk.org> wrote:

> Per RFC 8446, section 4.1.2, the legacy_version field in ClientHello message MUST be set to 0x0303 (TLSv1.2).
> T13ClientHelloConsumer should do this check like that T13ServerHelloConsumer does.

Marked as reviewed by xuelei (Reviewer).

-------------

PR: https://git.openjdk.java.net/jdk/pull/2772



More information about the security-dev mailing list