RFR: 8133816: Display extra SSLServerSocket info in debug mode [v3]

Xue-Lei Andrew Fan xuelei at openjdk.org
Fri Aug 26 14:54:10 UTC 2022


On Fri, 26 Aug 2022 12:03:33 GMT, Sean Coffey <coffeys at openjdk.org> wrote:

> ... on your "preference of client or server suites" data point question ....

It is not expected to break the connection by changing the preference even there are multiple key exchange algs.  There may be bugs, but did you see failures caused by preference in practice?   BTW, the information is logged when ServerHello failed, and it will not be logged if the process goes to key exchange handshake message point.

> They're all important data points before leading up the initial ServerHello response message. 

I agreed that there are all important data points.  I'm just not sure if it is the right approach to dump on ServerHello failure.

-------------

PR: https://git.openjdk.org/jdk/pull/9731



More information about the security-dev mailing list