RFR: 8370885: Default namedGroups values are not being filtered against algorithm constraints [v7]

Wed Jan 21 20:31:10 UTC 2026

On Wed, 21 Jan 2026 15:07:05 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

>> NamedGroup.SupportedGroups.namedGroups values are not being filtered against algorithm constraints, unlike other SSLParameters returned by SSLConfiguration#getSSLParameters() call. Those are the values being displayed to the user with "java -XshowSettings:security:tls" command.
>> 
>> Also making changes to avoid needless default group names lookup while we are touching this file.
>
> Artur Barashev has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Test fix: add the Hybrid named group. Move the comment.

Marked as reviewed by hchao (Reviewer).

-------------

PR Review: https://git.openjdk.org/jdk/pull/28397#pullrequestreview-3689274221