RFR: 8349583: Add mechanism to disable signature schemes based on their TLS scope [v14]
Artur Barashev
abarashev at openjdk.org
Fri Mar 7 16:31:33 UTC 2025
> Currently when a signature scheme constraint is specified with "jdk.tls.disabledAlgorithms" property we don't differentiate between signatures used to sign a TLS handshake exchange and the signatures used in TLS certificates:
> https://datatracker.ietf.org/doc/html/rfc8446#section-4.2.3
Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
Move SSLScope class description below the package
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/23681/files
- new: https://git.openjdk.org/jdk/pull/23681/files/7a786e0d..0c8d6d81
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=23681&range=13
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=23681&range=12-13
Stats: 4 lines in 1 file changed: 2 ins; 2 del; 0 mod
Patch: https://git.openjdk.org/jdk/pull/23681.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/23681/head:pull/23681
PR: https://git.openjdk.org/jdk/pull/23681
More information about the security-dev
mailing list