JDK-8174227 : Release Note: IllegalArgumentException from TLS handshake
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 6u141,7u131,8u121
  • Priority: P2
  • Status: Closed
  • Resolution: Delivered
  • Submitted: 2017-02-09
  • Updated: 2017-02-27
  • Resolved: 2017-02-27
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 6 JDK 7 JDK 8
6u141Resolved 7u131Resolved 8u121Resolved
Description
A recent issue from the JDK-8148516 fix can cause issue for some TLS servers. The problem originates from an *IllegalArgumentException* thrown by the TLS handshaker code.

```java.lang.IllegalArgumentException: System property jdk.tls.namedGroups(null) contains no supported elliptic curves```

The issue can arise when the server doesn't have elliptic curve cryptography support to handle an elliptic curve name extension field (if present). Users are advised to upgrade to this release. By default, JDK 7 Updates and later JDK families ship with the SunEC security provider which provides elliptic curve cryptography support. Those releases should not be impacted unless security providers are modified.

See [JDK-8173783](https://bugs.openjdk.java.net/browse/JDK-8173783)
Comments
Hi Cliff, Yes - this would be best approach. thanks, Sean. On 17/02/2017 20:29, Clifford Wayne wrote: > Hi Se��n, > Just a quick question about the release note subtasks for JDK-8173783. > > Should I use the existing JDK-8174212 content (6u151, 7u141, 8u131) for the JDK-8174227 release notes (6u141, 7u131, 8u121) ? > > Thanks, > Cliff
21-02-2017