RFR: 8349583: Add mechanism to disable signature schemes based on their TLS scope [v3]

Sean Mullan mullan at openjdk.org
Mon Feb 24 21:23:53 UTC 2025


On Mon, 24 Feb 2025 21:11:30 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> Neither are public APIs.  Is there a public API between that is preventing this?   They are both in the same java.base module.  They are in different packages, but both are not public (sun.security.ssl and sun.security.util).
>
> I meant they are in different packages. We need to make SSLCryptoScope public to expose outside of `ssl` package.

That's fine, you can make it public. Both classes are in internal packages in the java.base module, so it won't be exposed as a public API.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/23681#discussion_r1968434926


More information about the security-dev mailing list