RFR: 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446

Hai-May Chao hchao at openjdk.org
Sat Jul 20 16:19:30 UTC 2024


On Sat, 20 Jul 2024 01:32:00 GMT, Bradford Wetmore <wetmore at openjdk.org> wrote:

>> 8327538: The SSLExtension class specifies incorrect values for heartbeat per RFC 6520 and post_handshake_auth per RFC 8446
>
> LGTM.  
> 
> Since we don't support either extension, either add a regression test that searches a provided hardcoded ClientHello (I believe you can configure SSLLogger to do this, I'll know more next week) that searches for these two extensions in the output, or add the noreg-hard keyword.

@bradfordwetmore Keyword noreg-hard added. Thanks.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/20261#issuecomment-2241196602



More information about the security-dev mailing list