Integrated: 8370885: Default namedGroups values are not being filtered against algorithm constraints

Artur Barashev abarashev at openjdk.org
Thu Jan 22 13:14:52 UTC 2026


On Wed, 19 Nov 2025 17:26:25 GMT, Artur Barashev <abarashev at openjdk.org> wrote:

> NamedGroup.SupportedGroups.namedGroups values are not being filtered against algorithm constraints, unlike other SSLParameters returned by SSLConfiguration#getSSLParameters() call. Those are the values being displayed to the user with "java -XshowSettings:security:tls" command.
> 
> Also making changes to avoid needless default group names lookup while we are touching this file.

This pull request has now been integrated.

Changeset: 025041ba
Author:    Artur Barashev <abarashev at openjdk.org>
URL:       https://git.openjdk.org/jdk/commit/025041ba04f3ae3a149b9d57d0dde4afaef37f4c
Stats:     234 lines in 2 files changed: 160 ins; 44 del; 30 mod

8370885: Default namedGroups values are not being filtered against algorithm constraints

Reviewed-by: hchao

-------------

PR: https://git.openjdk.org/jdk/pull/28397


More information about the security-dev mailing list