Code Review Request, JDK-8167472, Chrome interop regression with JDK-8148516
xuelei.fan at oracle.com
Tue Oct 11 06:07:16 UTC 2016
On 10/11/2016 1:44 PM, Weijun Wang wrote:
> Code change looks fine.
> Or you can write if (isSupported && permits)....
Nice coding. Thanks!
> On 10/11/2016 13:06, Xuelei Fan wrote:
>> Please review this update:
>> The root cause is that in the update of JDK-8148516, we removed some EC
>> curves from the default supported EC curves list. However, while select
>> the preferable curves requested by the client side, the server does not
>> check whether the curves are supported or not. Actually, only supported
>> EC curves should be selected.
>> I tested the patch with Chrome, and no new test is added.
More information about the security-dev