RFR: 8351354: Enhance java -XshowSettings:security:tls to show enabled TLS groups and signature algorithms [v2]
Matthew Donovan
mdonovan at openjdk.org
Thu Oct 2 11:31:47 UTC 2025
On Mon, 4 Aug 2025 13:46:36 GMT, Artur Barashev <abarashev at openjdk.org> wrote:
> I think we should either implement a public API to provide those signature schemes or not display them at all to avoid any confusion. If someone sets `jdk.tls.client.SignatureSchemes` system property they would sure know about it. That property overrides all other signature schemes for both "signature_algorithms" and "signature_algorithms_cert" extensions.
I removed the signature algorithms from this output. If accurate lists aren't generated until TLS handshake, then I don't think there's any reason to print a list here.
-------------
PR Comment: https://git.openjdk.org/jdk/pull/24424#issuecomment-3360709304
More information about the security-dev
mailing list