RFR: 8341346: Add support for exporting TLS Keying Material [v5]
Bradford Wetmore
wetmore at openjdk.org
Wed May 7 04:25:05 UTC 2025
> Adds the RFC 5705/8446 TLS Key Exporters API/implementation to JSSE/SunJSSE respectively.
>
> CSR is underway.
>
> Tests include new unit tests for TLSv1-1.3. Will run tier1-2, plus the JCK API (jck:api/java_security jck:api/javax_crypto jck:api/javax_net jck:api/javax_security jck:api/org_ietf jck:api/javax_xml/crypto)
Bradford Wetmore has updated the pull request with a new target base due to a merge or a rebase. The incremental webrev excludes the unrelated changes brought in by the merge/rebase. The pull request contains six additional commits since the last revision:
- More codereview/CSR comments
- Merge branch 'master' into JDK-8341346
- Codereview comments.
- Moved too fast
- Tweak API to be more KDF like in unextractable case.
- 8341346: Add support for exporting TLS Keying Material
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/24976/files
- new: https://git.openjdk.org/jdk/pull/24976/files/bdd16052..64d46d9a
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=24976&range=04
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=24976&range=03-04
Stats: 10841 lines in 390 files changed: 7457 ins; 2245 del; 1139 mod
Patch: https://git.openjdk.org/jdk/pull/24976.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/24976/head:pull/24976
PR: https://git.openjdk.org/jdk/pull/24976
More information about the security-dev
mailing list