RFR: 8370885: Default namedGroups values are not being filtered against algorithm constraints [v5]

Artur Barashev abarashev at openjdk.org
Thu Jan 15 17:55:31 UTC 2026


> NamedGroup.SupportedGroups.namedGroups values are not being filtered against algorithm constraints, unlike other SSLParameters returned by SSLConfiguration#getSSLParameters() call. Those are the values being displayed to the user with "java -XshowSettings:security:tls" command.
> 
> Also making changes to avoid needless default group names lookup while we are touching this file.

Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:

  Update comments

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/28397/files
  - new: https://git.openjdk.org/jdk/pull/28397/files/00c5d6db..4eed0710

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=28397&range=04
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=28397&range=03-04

  Stats: 6 lines in 1 file changed: 5 ins; 1 del; 0 mod
  Patch: https://git.openjdk.org/jdk/pull/28397.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/28397/head:pull/28397

PR: https://git.openjdk.org/jdk/pull/28397


More information about the security-dev mailing list