RFR: 8280494: (D)TLS signature schemes [v13]
Sean Mullan
mullan at openjdk.java.net
Mon Feb 7 20:03:14 UTC 2022
On Fri, 4 Feb 2022 20:58:46 GMT, Xue-Lei Andrew Fan <xuelei at openjdk.org> wrote:
>> This update is to support signature schemes customization for individual (D)TLS connection. Please review the CSR as well:
>> CSR: https://bugs.openjdk.java.net/browse/JDK-8280495
>> RFE: https://bugs.openjdk.java.net/browse/JDK-8280494
>> Release-note: https://bugs.openjdk.java.net/browse/JDK-8281290
>
> Xue-Lei Andrew Fan has updated the pull request incrementally with one additional commit since the last revision:
>
> correct null tags
Changes requested by mullan (Reviewer).
src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 47:
> 45: * <p>
> 46: * SSLParameters can be created via the constructors in this class.
> 47: * Objects can also be obtained using the {@code getSSLParameters()}
Since you introduce the terms "pre-populated" and "connection populated" in the new methods, I think it would be useful to describe them up front in the summary, ex:
`{@code SSLParameter} objects can be created via the constructors in this class, and can be described as pre-populated objects. {@code SSLParameter} objects can also be obtained using the ... <list all the methods>, and can be described as connection populated objects."
src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 744:
> 742: * the {@systemProperty jdk.tls.client.SignatureSchemes} and/or
> 743: * {@systemProperty jdk.tls.server.SignatureSchemes} system properties to
> 744: * customize the provider-specific default signature schemes.
This still doesn't say if the properties override the API. I would suggest adding a sentence: "If set, these properties will override the signature schemes returned by this method."
Similar comment in `setSignatureSchemes`.
src/java.base/share/classes/javax/net/ssl/SSLParameters.java line 747:
> 745: *
> 746: * @return an array of signature scheme {@code Strings} or {@code null} if
> 747: * none have been set. For non-null returns, this method willu
Typo, s/willu/will/
-------------
PR: https://git.openjdk.java.net/jdk/pull/7252
More information about the security-dev
mailing list