RFR: 8331682: Slow networks/Impatient clients can potentially send unencrypted TLSv1.3 alerts that won't parse on the server [v3]

Hai-May Chao hchao at openjdk.org
Fri Sep 20 16:15:38 UTC 2024


On Thu, 19 Sep 2024 21:33:11 GMT, Artur Barashev <duke at openjdk.org> wrote:

>> https://bugs.openjdk.org/browse/JDK-8331682
>
> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Add assertions. Add the final server wrap

test/jdk/javax/net/ssl/TLSv13/SSLEngineNoServerHelloClientShutdown.java line 239:

> 237: 
> 238:         /* TODO: Final client unwrap fails because server doesn't send an alert to terminate
> 239:            the handshake after receiving close_notify alert from the client. Investigate why.

Is this TODO item done?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/21043#discussion_r1768876791


More information about the security-dev mailing list