Integrated: 8163327: Remove 3DES from the default enabled cipher suites list

Sean Mullan mullan at openjdk.java.net
Wed Mar 23 18:36:31 UTC 2022


On Mon, 21 Mar 2022 19:40:07 GMT, Sean Mullan <mullan at openjdk.org> wrote:

> This fix removes obsolete and deprecated 3DES cipher suites from the default enabled cipher suites list of the SunJSSE provider implementation. 
> 
> Note that 3DES suites are already disabled by default via the `jdk.tls.disabledAlgorithms` security property.  This change goes one step further and provides an extra level of defense by making them unavailable by default.  See the CSR for more details: https://bugs.openjdk.java.net/browse/JDK-8283450

This pull request has now been integrated.

Changeset: 138460c0
Author:    Sean Mullan <mullan at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/138460c004a9a21a84f892896cf2f172fab2ac99
Stats:     137 lines in 4 files changed: 83 ins; 35 del; 19 mod

8163327: Remove 3DES from the default enabled cipher suites list

Reviewed-by: xuelei

-------------

PR: https://git.openjdk.java.net/jdk/pull/7894



More information about the security-dev mailing list