JDK-8238572 : Test to check if JSSE functions well without libsunec
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Priority: P3
  • Status: Closed
  • Resolution: Won't Fix
  • Submitted: 2020-02-06
  • Updated: 2020-04-27
  • Resolved: 2020-04-27
Related Reports
Relates :  
Description
After libsunec is removed, the EC-related cipher suites should be excluded from the supported cipher suite list, and the ECDSA schemes should be excluded from extensions signature_algorithms and signature_algorithms_cert.
Comments
After the push of JDK-8237219, the native SunEC implementation has been disabled by default. Even if libsunec is removed, the EC-related cipher suites and ECDSA schemes are still there. When libsunec is removed someday, we could just check if the existing JSSE tests, which contain a lot of EC-related tests, pass. So, it may be unnecessary to develop a separated test for this point.
27-04-2020

JDK-8237219 introduced a new system property jdk.sunec.disableNative for disabling the native SunEC.
24-04-2020