RFR: 8350582: Correct the parsing of the ssl value in javax.net.debug [v4]

Bradford Wetmore wetmore at openjdk.org
Tue Apr 15 00:04:51 UTC 2025


On Mon, 14 Apr 2025 18:42:40 GMT, Sean Coffey <coffeys at openjdk.org> wrote:

>> Breaking the parent JDK-8044609 JBS issue into sub tasks. 
>> 
>> This patch addresses the main issue which is that `javax.net.debug=ssl ` option is completely broken since TLSv1.3 support was introduced.  This patch should be easier for backporting also.
>> 
>> Wider corrections can be followed up via parent bug.
>
> Sean Coffey has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains six additional commits since the last revision:
> 
>  - Review comments from Brad
>  - Merge branch 'master' into 8350582-javax-debug
>  - Incorporate latest review feedback
>  - Feedback from Mikhail
>  - correct bug id
>  - 8210430

Thanks for addressing the other issues in the test e.g. `main`, `../..`, and bug description.

In looking at the proposed test for this issue, what I was thinking of is actually a mix of 8350582 and future bug [JDK-8044609](https://bugs.openjdk.org/browse/JDK-8044609) which cleans up the cat/subcats assignments.  

This bug only handles the `ssl` change, so I'm thinking we should change the regtest for this bug to be a simple test looking for the effects of `ssl` with no `data/verbose/plaintext/packet` output, and move (or update) this more general test to be done for 8044609.  

Thoughts?

test/jdk/sun/security/ssl/SSLLogger/DebugPropertyValuesTest.java line 79:

> 77:         debugMessages.put("logger",
> 78:                 List.of("FINE: adding as trusted certificates",
> 79:                         "FINE: WRITE: TLSv1.3 application_data"));

Missing a few more test cases for the more general test case.
  
`session` -> `Session initialized:`
`packet`  -> `Raw write`
`defaultctx` -> (may not be able to add if you're using non-default contexts)
`verbose` -> `Ignore unsupported cipher suite:`

-------------

PR Review: https://git.openjdk.org/jdk/pull/23781#pullrequestreview-2765771586
PR Review Comment: https://git.openjdk.org/jdk/pull/23781#discussion_r2042989284


More information about the security-dev mailing list