RFR: 8367059: DTLS: loss of NewSessionTicket message results in handshake failure [v7]

Artur Barashev abarashev at openjdk.org
Mon Oct 13 17:28:06 UTC 2025


> If the NewSessionTicket message is lost, the handshake fails on the client side with:
> javax.net.ssl.SSLHandshakeException: (decrypt_error) The Finished message cannot be verified.

Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:

  Restore "createSSLEngine" access privileges to make existing tests pass

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/27677/files
  - new: https://git.openjdk.org/jdk/pull/27677/files/bcfaa2e1..13271c2e

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=27677&range=06
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=27677&range=05-06

  Stats: 1 line in 1 file changed: 0 ins; 0 del; 1 mod
  Patch: https://git.openjdk.org/jdk/pull/27677.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27677/head:pull/27677

PR: https://git.openjdk.org/jdk/pull/27677


More information about the security-dev mailing list