RFR: 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
Bradford Wetmore
wetmore at openjdk.org
Sat Jul 20 01:34:38 UTC 2024
On Fri, 19 Jul 2024 17:24:04 GMT, Hai-May Chao <hchao at openjdk.org> wrote:
> 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
LGTM.
Since we don't support either extension, either add a regression test that searches a provided hardcoded ClientHello (I believe you can configure SSLLogger to do this, I'll know more next week) that searches for these two extensions in the output, or add the noreg-hard keyword.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/20261#issuecomment-2240822823
More information about the security-dev
mailing list