<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Segoe UI Emoji";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="mso-fareast-language:EN-US">Hi Christoph,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">thank you for the review and checking the tests!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">I agree. We should try to deliver it with 11.0.11 if possible.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">I’ve added the CSR to my backport comment and labeled the issue with jdk11u-critical-request.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US">Martin<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Langer, Christoph <christoph.langer@sap.com>
<br>
<b>Sent:</b> Mittwoch, 24. März 2021 15:48<br>
<b>To:</b> Doerr, Martin <martin.doerr@sap.com>; jdk-updates-dev@openjdk.java.net; security-dev <security-dev@openjdk.java.net>; Severin Gehwolf <sgehwolf@redhat.com>; Andrew Haley <aph@redhat.com><br>
<b>Cc:</b> Lindenmaier, Goetz <goetz.lindenmaier@sap.com><br>
<b>Subject:</b> RE: [11u] RFR: 8206925: Support the certificate_authorities extension<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Hi Martin,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">your backport looks good. I see the new tests pass and our testing does not unveil other regressions. Reviewed.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Oracle has already included this item in 11.0.10 but it fell through the cracks for OpenJDK 11u due to an issue with the updates filter. However, it seems like an important item for TLS 1.3 usability. We have just received
a customer request why this wasn’t included in 11u yet, they would need it for their product to move on to TLS 1.3. So I think we should strive for 11.0.11 with this backport. Please label accordingly. Adding
<a id="OWAAM843CC9CC85A94ECDA1E700D5E4128FB5" href="mailto:aph@redhat.com"><span style="font-family:"Calibri",sans-serif;text-decoration:none">@Andrew Haley</span></a> and
<a id="OWAAM57B7B20753054BACA8741A4B016AA478" href="mailto:sgehwolf@redhat.com"><span style="font-family:"Calibri",sans-serif;text-decoration:none">@Severin Gehwolf</span></a> for their opinion on this decision
</span><span lang="EN-US" style="font-family:"Segoe UI Emoji",sans-serif">😊</span><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The CSR <a href="https://bugs.openjdk.java.net/browse/JDK-8248709">
https://bugs.openjdk.java.net/browse/JDK-8248709</a> should apply to this backport, please link it to the JBS issue.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks & Best regards<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Christoph<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> Doerr, Martin <<a href="mailto:martin.doerr@sap.com">martin.doerr@sap.com</a>>
<br>
<b>Sent:</b> Dienstag, 23. März 2021 16:25<br>
<b>To:</b> <a href="mailto:jdk-updates-dev@openjdk.java.net">jdk-updates-dev@openjdk.java.net</a>; security-dev <<a href="mailto:security-dev@openjdk.java.net">security-dev@openjdk.java.net</a>><br>
<b>Cc:</b> Lindenmaier, Goetz <<a href="mailto:goetz.lindenmaier@sap.com">goetz.lindenmaier@sap.com</a>>; Langer, Christoph <<a href="mailto:christoph.langer@sap.com">christoph.langer@sap.com</a>><br>
<b>Subject:</b> [11u] RFR: 8206925: Support the certificate_authorities extension<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">JDK-8206925 was backported to 11.0.10-oracle, but it’s still missing in the Open Source version.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I'd like to backport it for parity.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">It does apply cleanly, but I had to modify it, because the following change is not in 11u:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="https://bugs.openjdk.java.net/browse/JDK-8215712">https://bugs.openjdk.java.net/browse/JDK-8215712</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Bug:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><a href="https://bugs.openjdk.java.net/browse/JDK-8206925">https://bugs.openjdk.java.net/browse/JDK-8206925</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Original change:<o:p></o:p></span></p>
<p class="MsoNormal"><a href="https://hg.openjdk.java.net/jdk/jdk/rev/827bac238aa0"><span lang="EN-US">https://hg.openjdk.java.net/jdk/jdk/rev/827bac238aa0</span></a><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">11u backport:<o:p></o:p></p>
<p class="MsoNormal"><a href="http://cr.openjdk.java.net/~mdoerr/8206925_ca_ext_11u/webrev.00/">http://cr.openjdk.java.net/~mdoerr/8206925_ca_ext_11u/webrev.00/</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Manual change to make it work without JDK-8215712 (SSLStringizer and derived classes don’t take a HandshakeContext in 11u):<o:p></o:p></span></p>
<p class="MsoNormal"><a href="http://cr.openjdk.java.net/~mdoerr/8206925_ca_ext_11u/8206925_ca_ext_diff.txt"><span lang="EN-US">http://cr.openjdk.java.net/~mdoerr/8206925_ca_ext_11u/8206925_ca_ext_diff.txt</span></a><span lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal">Please review.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal">Martin<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>