Hello fellow devs!

[Daniel Jeliński]

Hi Paul,
If you're interested in dealing with handshake extensions from user code,
that is currently not possible. SSLEngine abstracts away all TLS messaging.
SSLParameters can be used to configure a limited subset of extensions to
send (like server_name or application protocol), and the negotiated
application protocol can be retrieved from SSLEngine, and that's pretty
much it.

Use_srtp extension is not currently supported by JSSE. If you want to add
that support, you'd need to add the appropriate enum values to
sun.security.ssl.SSLExtension, using the constructors that specify a
producer and a consumer. I'm not familiar with WebRTC or SRTP, so I don't
know how that would interact with the rest of the code.

If you have an idea how WebRTC / SRTP support could be implemented in JSSE,
this is the right place for that discussion.

Regards,
Daniel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mail.openjdk.org/pipermail/security-dev/attachments/20240308/e2b4d6e1/attachment.htm>