RFR: 8301379: Verify TLS_ECDH_* cipher suites cannot be negotiated [v4]

Matthew Donovan mdonovan at openjdk.org
Thu Jun 15 12:35:38 UTC 2023


> This PR implements a test to verify that Java will not negotiate TLS connections when one side of the connection requests disabled cipher suites.

Matthew Donovan has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains six additional commits since the last revision:

 - Merge branch 'master' into JDK-8301379
 - refactored to combine common code, use ssl test template class
 - added all disabled ciphers
 - cleaned up code, combined individual executions
 - Merge branch 'master' into JDK-8301379
 - 8301379: Verify TLS_ECDH_* cipher suites cannot be negotiated

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/14316/files
  - new: https://git.openjdk.org/jdk/pull/14316/files/64e32b89..d66a7c2f

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=14316&range=03
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=14316&range=02-03

  Stats: 15001 lines in 472 files changed: 4573 ins; 8815 del; 1613 mod
  Patch: https://git.openjdk.org/jdk/pull/14316.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/14316/head:pull/14316

PR: https://git.openjdk.org/jdk/pull/14316



More information about the security-dev mailing list