RFR: 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server [v20]

duke duke at openjdk.org
Tue Oct 15 15:16:17 UTC 2024


On Fri, 11 Oct 2024 18:36:50 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> Check for unexpected plaintext alert message during TLSv1.3 handshake. This can happen if client doesn't receive ServerHello due to network timeout and tries to close the connection by sending an alert message.
>
> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Adjust line length

@artur-oracle 
Your change (at version b8e0655828a597555417fc25f12d7a95d814f501) is now ready to be sponsored by a Committer.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/21043#issuecomment-2414241024


More information about the security-dev mailing list