<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr" data-ogsc="" style="">
<div dir="ltr">
<div dir="ltr" data-ogsc="" style="">
<div></div>
<div>
<div>Hello Sean, </div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Are the separate entries for 3DES and DES needed or can they also be collapsed?</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">BTW i am always unsre about the interactions of setting the Protocol and the enabled ciphers so I am in the habit to set the protocols before using getEnabled or setting enabled ciphers. I guess it makes no difference but for that reason I would
move line 76 before 73 in the test.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Gruss</div>
<div dir="ltr">Bernd</div>
<div class="ms-outlook-ios-signature" id="ms-outlook-mobile-signature">
<div style="direction: ltr;">-- </div>
<div style="direction: ltr;">http://bernd.eckenfels.net</div>
</div>
</div>
<!--{"start":[1,5,0,275],"end":[1,5,0,275]}--></div>
<!--{"start":[1],"end":[1]}--></div>
<!--{"start":[1],"end":[1]}--></div>
<!--{"start":[1],"end":[1]}--></div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Von:</b> security-dev <security-dev-bounces@openjdk.java.net> im Auftrag von Sean Mullan <sean.mullan@oracle.com><br>
<b>Gesendet:</b> Thursday, February 20, 2020 2:01:59 PM<br>
<b>An:</b> security Dev OpenJDK <security-dev@openjdk.java.net><br>
<b>Betreff:</b> [15] RFR: 8238560: Cleanup and consolidate algorithms in the jdk.tls.legacyAlgorithms security property</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Please review this change to cleanup and consolidate the default value
<br>
of the jdk.tls.legacyAlgorithms security property. The following changes <br>
have been made:<br>
<br>
1. Changed K_NULL, C_NULL, M_NULL to NULL, which will cover all null <br>
cipher suites. The *_NULL algorithms were implementation details and not <br>
compliant with the specification of the property.<br>
<br>
2. Changed DH_anon, ECDH_anon to anon, which will cover all cipher <br>
suites using anonymous authentication.<br>
<br>
3. Changed RC4_128, RC4_40 to RC4, which will cover all cipher suites <br>
using RC4 for encryption.<br>
<br>
4. Changed DES_CBC, DES40_CBC to DES, which will cover all cipher suites <br>
using DES for encryption.<br>
<br>
I also added a new regression test.<br>
<br>
CSR: <a href="https://bugs.openjdk.java.net/browse/JDK-8239377">https://bugs.openjdk.java.net/browse/JDK-8239377</a><br>
webrev: <a href="http://cr.openjdk.java.net/~mullan/webrevs/8238560/webrev.00/">http://cr.openjdk.java.net/~mullan/webrevs/8238560/webrev.00/</a><br>
<br>
Thanks,<br>
Sean<br>
</div>
</span></font></div>
</body>
</html>