RFR: 8371688: Unexpected behavior for jdk.tls.client.cipherSuites system property

Artur Barashev abarashev at openjdk.org
Tue Nov 25 19:32:32 UTC 2025


The jdk.tls.client.cipherSuites and jdk.tls.server.cipherSuites system properties allow a custom set of cipher suites to be used for the default JDK SSLContext. If such properties specify cipher suites not supported by the JDK, then the JDK falls back to using the default cipher suite list (as if no property was specified). This seems like unexpected behavior.

-------------

Commit messages:
 - 8371688: Unexpected behavior for jdk.tls.client.cipherSuites system property

Changes: https://git.openjdk.org/jdk/pull/28499/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=28499&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8371688
  Stats: 80 lines in 3 files changed: 57 ins; 18 del; 5 mod
  Patch: https://git.openjdk.org/jdk/pull/28499.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/28499/head:pull/28499

PR: https://git.openjdk.org/jdk/pull/28499


More information about the security-dev mailing list