JDK-8215430 : Remove the internal package com.sun.net.ssl
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2018-12-14
  • Updated: 2024-02-14
  • Resolved: 2019-03-01
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 13
13 b11Fixed
Related Reports
CSR :  
JDK-8218932 - Remove the internal package com.sun.net.ssl
Duplicate :  
JDK-6984587 - delete com.sun.net.ssl.internal.ssl.X509ExtendedTrustManagerImpl
Relates :  
JDK-8219987 - Cleanup the delegation mode of HttpsURLConnection implementation
Relates :  
JDK-8219994 - CheckSecurityProvider.java fails with unexpected sun.security.ssl.SunJSSE
Relates :  
JDK-8219989 - Retire the com.sun.net.ssl.internal.ssl.Provider name
Relates :  
JDK-8250787 - Provider.put no longer registering aliases in FIPS env
Relates :  
JDK-8160247 - Mark deprecated javax.security.cert APIs with forRemoval=true
Sub Tasks
JDK-8219479 :  
Release Note: Removal of the Internal com.sun.net.ssl package which was only used for Compatibility with Legacy JSSE 1.0 Applications - Closed
Description
The full package "com.sun.net.ssl" had been deprecated since JDK 1.4, and the codes have not been updated for a while. There is only two external dependency of the code.  They are external JSSE provider (Security.java) and the RSA Signature provider (Signature.java).

This package is not exported in the java.base module, and application cannot use them directly any more.  It should be safe to remove them now, and reorg the provider impl code to sun.security.ssl.
Comments
Before it was possible to set "from outside" a FIPS crypto provider. This was done that way by our JDK users: >Provider tlsProvider = new com.sun.net.ssl.internal.ssl.Provider("MYFIPS"); >sslCtx = SSLContext.getInstance("TLS", tlsProvider); How should this be done after the com.sun.net.ssl.internal.ssl.Provider removal?
14-02-2024
URL: http://hg.openjdk.java.net/jdk/jdk/rev/43c2ab1bdfd3 User: xuelei Date: 2019-03-01 16:35:55 +0000
01-03-2019