Integrated: 8370885: Default namedGroups values are not being filtered against algorithm constraints
Artur Barashev
abarashev at openjdk.org
Thu Jan 22 13:14:52 UTC 2026
On Wed, 19 Nov 2025 17:26:25 GMT, Artur Barashev <abarashev at openjdk.org> wrote:
> NamedGroup.SupportedGroups.namedGroups values are not being filtered against algorithm constraints, unlike other SSLParameters returned by SSLConfiguration#getSSLParameters() call. Those are the values being displayed to the user with "java -XshowSettings:security:tls" command.
>
> Also making changes to avoid needless default group names lookup while we are touching this file.
This pull request has now been integrated.
Changeset: 025041ba
Author: Artur Barashev <abarashev at openjdk.org>
URL: https://git.openjdk.org/jdk/commit/025041ba04f3ae3a149b9d57d0dde4afaef37f4c
Stats: 234 lines in 2 files changed: 160 ins; 44 del; 30 mod
8370885: Default namedGroups values are not being filtered against algorithm constraints
Reviewed-by: hchao
-------------
PR: https://git.openjdk.org/jdk/pull/28397
More information about the security-dev
mailing list