JDK-8245466 : Backport TLSv1.3 protocol implementation
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: openjdk8u262
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2020-05-20
  • Updated: 2020-11-19
  • Resolved: 2020-08-31
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
openjdk8u272 b06Fixed
Related Reports
CSR :  
Relates :  
Relates :  
Sub Tasks
JDK-8245467 :  
JDK-8245468 :  
JDK-8245469 :  
JDK-8245470 :  
JDK-8245471 :  
JDK-8245472 :  
JDK-8245473 :  
JDK-8245474 :  
JDK-8245476 :  
JDK-8245477 :  
JDK-8245653 :  
JDK-8245681 :  
JDK-8247276 :  
JDK-8251340 :  
JDK-8251341 :  
JDK-8251478 :  
This backport should include the following features:
- TLSv1.3 protocol implementation on the base of JDK11.0.7
- No DTLS protocol support
- OCSP Stapling (JEP-249) should be supported but disabled by default
- TLS_KRB5 cipher suites (RFC 2712) should be supported
- Implementation should not propose TLSv1.3 protocol in the ClientHello message by default
- Update for TLS related regression tests
Merged for 8u272 release: https://hg.openjdk.java.net/jdk8u/jdk8u-dev/jdk/rev/4546aa3faf37

Approved. Will merge once everything else is ready for 8u272 rampdown.

Fix request (8u) I'd like to request an approval to have this enhancement in 8u. Having a SunJSSE engine that supports TLS v1.3 is critical for the compatibility and security of the 8u release. All the sub-tasks of this meta-ticket have been review-approved (see links to review-approval as comments on each of them). No test regressions observed in any of the SSL-related tests (see review comments for JDK-8251478). CSR has been approved. Code is currently pushed to the jdk8u-jsse-incubator repository [1] and will be merged into 8u main line (targeting 8u272 release) if this request is approved. -- [1] - http://hg.openjdk.java.net/jdk8u/jdk8u-jsse-incubator/