RFR: 8277881 Missing SessionID in TLS1.3 resumption in compatibility mode

Daniel Jeliński duke at openjdk.java.net
Mon Nov 29 08:50:27 UTC 2021


All TLS 1.3 handshakes in compatibility mode must send a non-empty SessionID field. Currently TLS1.3 session resumptions are sending empty session ID. This patch fixes that problem.

All jdk_core tests passed. The newly added check passes with the patch, fails without it.

-------------

Commit messages:
 - Add bug ID
 - Send SessionID during TLS 1.3 resumption

Changes: https://git.openjdk.java.net/jdk/pull/6583/files
 Webrev: https://webrevs.openjdk.java.net/?repo=jdk&pr=6583&range=00
  Issue: https://bugs.openjdk.java.net/browse/JDK-8277881
  Stats: 14 lines in 3 files changed: 4 ins; 1 del; 9 mod
  Patch: https://git.openjdk.java.net/jdk/pull/6583.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/6583/head:pull/6583

PR: https://git.openjdk.java.net/jdk/pull/6583



More information about the security-dev mailing list