RFR: 8341964: Add mechanism to disable different parts of TLS cipher suite [v3]

Artur Barashev abarashev at openjdk.org
Tue Nov 5 22:01:30 UTC 2024


On Tue, 5 Nov 2024 21:34:17 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>> 
>>   "Cipher suites must start with TLS_" doc update
>
> src/java.base/share/conf/security/java.security line 779:
> 
>> 777: # See the specification of "jdk.certpath.disabledAlgorithms" for the
>> 778: # syntax of the disabled algorithm string. Additionally, TLS cipher suites
>> 779: # can be disabled here using "*" wildcard syntax. For example "TLS_RSA_*"
> 
> Suggest not using "here" and instead say "with this property", ex: "... can be disabled with this property using ..."

Will do

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/21841#discussion_r1830055725


More information about the security-dev mailing list