RFR: 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446

Bradford Wetmore wetmore at openjdk.org
Sat Jul 20 01:34:38 UTC 2024


On Fri, 19 Jul 2024 17:24:04 GMT, Hai-May Chao <hchao at openjdk.org> wrote:

> 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446

LGTM.  

Since we don't support either extension, either add a regression test that searches a provided hardcoded ClientHello (I believe you can configure SSLLogger to do this, I'll know more next week) that searches for these two extensions in the output, or add the noreg-hard keyword.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/20261#issuecomment-2240822823



More information about the security-dev mailing list