RFR: 8350582: Correct the parsing of the ssl value in javax.net.debug [v5]

Bradford Wetmore wetmore at openjdk.org
Wed Apr 23 21:13:57 UTC 2025


On Thu, 17 Apr 2025 15:25:36 GMT, Sean Coffey <coffeys at openjdk.org> wrote:

>> Breaking the parent JDK-8044609 JBS issue into sub tasks. 
>> 
>> This patch addresses the main issue which is that `javax.net.debug=ssl ` option is completely broken since TLSv1.3 support was introduced.  This patch should be easier for backporting also.
>> 
>> Wider corrections can be followed up via parent bug.
>
> Sean Coffey has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Add extra component coverage to test

We never did hear from Xuelei, so will go with our best guess, which is that that change introduced a bug, and was not an intentional reversal of behavior as I initially believed.

I approve this PR with the strong urging that JDK-8044609 can be fixed in JDK 25, and hopefully backported together.  That change should be able to be reviewed quickly, now that we are past this big issue.

-------------

Marked as reviewed by wetmore (Reviewer).

PR Review: https://git.openjdk.org/jdk/pull/23781#pullrequestreview-2788693100


More information about the security-dev mailing list