JDK-8212998 : Release Note: Disabled TLS anon and NULL Cipher Suites
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 7u211,8u201,11.0.2,12
  • Priority: P3
  • Status: Closed
  • Resolution: Delivered
  • Submitted: 2018-10-25
  • Updated: 2019-04-09
  • Resolved: 2018-11-16
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 11 JDK 12 JDK 7 JDK 8
11.0.2Resolved 12Resolved 7u211Resolved 8u201Resolved
Description
The TLS anon (anonymous) and NULL cipher suites have been added to the `jdk.tls.disabledAlgorithms` security property and are now disabled by default.