RFR: 8370885: Default namedGroups values are not being filtered against algorithm constraints [v6]
Artur Barashev
abarashev at openjdk.org
Wed Jan 21 15:03:29 UTC 2026
> NamedGroup.SupportedGroups.namedGroups values are not being filtered against algorithm constraints, unlike other SSLParameters returned by SSLConfiguration#getSSLParameters() call. Those are the values being displayed to the user with "java -XshowSettings:security:tls" command.
>
> Also making changes to avoid needless default group names lookup while we are touching this file.
Artur Barashev has updated the pull request with a new target base due to a merge or a rebase. The pull request now contains seven commits:
- Merge branch 'master' into JDK-8370885
# Conflicts:
# src/java.base/share/classes/sun/security/ssl/NamedGroup.java
- Update comments
- Merge branch 'master' into JDK-8370885
# Conflicts:
# src/java.base/share/classes/sun/security/ssl/NamedGroup.java
- Update copyright year
- Merge branch 'master' into JDK-8370885
- Merge branch 'master' into JDK-8370885
# Conflicts:
# src/java.base/share/classes/sun/security/ssl/NamedGroup.java
- 8370885: Default namedGroups values are not being filtered against algorithm constraints
-------------
Changes: https://git.openjdk.org/jdk/pull/28397/files
Webrev: https://webrevs.openjdk.org/?repo=jdk&pr=28397&range=05
Stats: 233 lines in 2 files changed: 159 ins; 44 del; 30 mod
Patch: https://git.openjdk.org/jdk/pull/28397.diff
Fetch: git fetch https://git.openjdk.org/jdk.git pull/28397/head:pull/28397
PR: https://git.openjdk.org/jdk/pull/28397
More information about the security-dev
mailing list