RFR: 8367059: DTLS: loss of NewSessionTicket message results in handshake failure [v5]

Daniel Jeliński djelinski at openjdk.org
Mon Oct 13 14:14:35 UTC 2025


On Mon, 13 Oct 2025 13:59:21 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> test/jdk/javax/net/ssl/DTLS/DTLSOverDatagram.java line 138:
>> 
>>> 136:                 isClient ? getClientDTLSContext() : getServerDTLSContext();
>>> 137:         SSLEngine engine = context.createSSLEngine(HOST,
>>> 138:                 isClient ? CLIENT_PORT : SERVER_PORT);
>> 
>> Suggestion:
>> 
>>                 isClient ? SERVER_PORT : CLIENT_PORT);
>> 
>> Client uses server port, server uses client port.
>
> Not sure what I'm missing here: if `isClient` is `true` then we use `CLIENT_PORT`

right. The client is supposed to use the server port, and the server may use the client port (but may also use the no-argument createSSLEngine overload)

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27677#discussion_r2426476570


More information about the security-dev mailing list