RFR: 8370885: Default namedGroups values are not being filtered against algorithm constraints [v5]
Artur Barashev
abarashev at openjdk.org
Thu Jan 15 17:55:31 UTC 2026
> NamedGroup.SupportedGroups.namedGroups values are not being filtered against algorithm constraints, unlike other SSLParameters returned by SSLConfiguration#getSSLParameters() call. Those are the values being displayed to the user with "java -XshowSettings:security:tls" command.
>
> Also making changes to avoid needless default group names lookup while we are touching this file.
Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
Update comments
-------------
Changes:
- all: https://git.openjdk.org/jdk/pull/28397/files
- new: https://git.openjdk.org/jdk/pull/28397/files/00c5d6db..4eed0710
Webrevs:
- full: https://webrevs.openjdk.org/?repo=jdk&pr=28397&range=04
- incr: https://webrevs.openjdk.org/?repo=jdk&pr=28397&range=03-04
Stats: 6 lines in 1 file changed: 5 ins; 1 del; 0 mod
Patch: https://git.openjdk.org/jdk/pull/28397.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/28397/head:pull/28397
PR: https://git.openjdk.org/jdk/pull/28397
More information about the security-dev
mailing list