RFR: 8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message [v5]
Sean Coffey
coffeys at openjdk.org
Wed Mar 20 12:08:19 UTC 2024
On Wed, 20 Mar 2024 10:03:22 GMT, Sibabrata Sahoo <ssahoo at openjdk.org> wrote:
>> (clientHello.sessionId.length() != 0) condition checks for same
>
> Got it. Thanks.. CH legacy_session_id uses this check for non-empty sessionId.
just see this comment regards `useCompatibilityMode` - I'd a similar concern. shouldn't useCompatibilityMode be checked no matter what value we get for `clientHello.sessionId.length() `?
-------------
PR Review Comment: https://git.openjdk.org/jdk/pull/18372#discussion_r1531968258
More information about the security-dev
mailing list