RFR: 8351354: Enhance java -XshowSettings:security:tls to show enabled TLS groups and signature algorithms [v2]

Matthew Donovan mdonovan at openjdk.org
Thu Oct 2 11:31:47 UTC 2025


On Mon, 4 Aug 2025 13:46:36 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

> I think we should either implement a public API to provide those signature schemes or not display them at all to avoid any confusion. If someone sets `jdk.tls.client.SignatureSchemes` system property they would sure know about it. That property overrides all other signature schemes for both "signature_algorithms" and "signature_algorithms_cert" extensions.

I removed the signature algorithms from this output. If accurate lists aren't generated until TLS handshake, then I don't think there's any reason to print a list here.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/24424#issuecomment-3360709304


More information about the security-dev mailing list