RFR: 8366364: Address inconsistencies in SSLParameters object returned by SSLConfiguration#getSSLParameters() call [v4]

Artur Barashev abarashev at openjdk.org
Wed Oct 29 00:36:25 UTC 2025


> We need to address the following inconsistencies in SSLConfiguration#getSSLParameters() call:
> - For the signatureSchemes we return only what's been set by the user, the default values are not being returned like for other SSLParameters.
> - namedGroups return value is not being filtered against algorithm constraints, unlike other SSLParameters.

Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:

  - Use better logging method
  - Remove now unnecessary null check for config.signatureSchemes

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/27961/files
  - new: https://git.openjdk.org/jdk/pull/27961/files/f8721c93..a2235e0b

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=27961&range=03
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=27961&range=02-03

  Stats: 17 lines in 1 file changed: 0 ins; 5 del; 12 mod
  Patch: https://git.openjdk.org/jdk/pull/27961.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/27961/head:pull/27961

PR: https://git.openjdk.org/jdk/pull/27961


More information about the security-dev mailing list