RFR: 8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message [v5]
Sibabrata Sahoo
ssahoo at openjdk.org
Wed Mar 20 18:58:24 UTC 2024
On Wed, 20 Mar 2024 09:55:34 GMT, Prasadrao Koppula <pkoppula at openjdk.org> wrote:
>> JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message.
>>
>> According to RFC 8446 (Middlebox Compatibility Mode), if the client sends a non-empty session ID in the ClientHello message, the server sends a dummy change_cipher_spec (CCS) record immediately after its first handshake message. This may either be after a ServerHello or a HelloRetryRequest.
>>
>> https://datatracker.ietf.org/doc/html/rfc8446#appendix-D.4
>
> Prasadrao Koppula has updated the pull request incrementally with one additional commit since the last revision:
>
> JDK-8326643
Can you please add a new Test to have a TLSv1.3 complete connection by setting jdk.tls.client.useCompatibilityMode=true|false.
You may ignore if such Test exist and point that Test name.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/18372#issuecomment-2010371047
More information about the security-dev
mailing list