RFR: 8296820: Add implementation note to SSLContext.getInstance noting subsequent behavior if protocol is disabled
Xue-Lei Andrew Fan
xuelei at openjdk.org
Tue Nov 15 18:30:16 UTC 2022
On Tue, 15 Nov 2022 17:41:19 GMT, Sean Mullan <mullan at openjdk.org> wrote:
> Please review this PR to add an implementation note to the`SSLContext.getInstance` methods to document the behavior when a protocol is disabled.
As you are already there, it may be nice to cover more options that the protocol may not be used for the handshaking. Here are some cases I'm aware of:
1. the protocol is disabled with Security property
2. the protocol is not set while setting the SSLParameters
3. the protocol is not set while set the enabled protocol
4. the protocol is not supported by the peer
5. the protocol is not supported by any cipher suites enabled.
-------------
PR: https://git.openjdk.org/jdk/pull/11172
More information about the security-dev
mailing list