RFR: 8370885: Default namedGroups values are not being filtered against algorithm constraints [v5]
Hai-May Chao
hchao at openjdk.org
Wed Jan 21 05:55:53 UTC 2026
On Thu, 15 Jan 2026 17:55:31 GMT, Artur Barashev <abarashev at openjdk.org> wrote:
>> NamedGroup.SupportedGroups.namedGroups values are not being filtered against algorithm constraints, unlike other SSLParameters returned by SSLConfiguration#getSSLParameters() call. Those are the values being displayed to the user with "java -XshowSettings:security:tls" command.
>>
>> Also making changes to avoid needless default group names lookup while we are touching this file.
>
> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
>
> Update comments
Marked as reviewed by hchao (Reviewer).
-------------
PR Review: https://git.openjdk.org/jdk/pull/28397#pullrequestreview-3685456710
More information about the security-dev
mailing list