Bug ID: JDK-8245468 Add TLSv1.3 implementation classes from 11.0.7

JDK-8245468 : Add TLSv1.3 implementation classes from 11.0.7

Type: Sub-task
Component: security-libs

Priority: P4
Status: Resolved
Resolution: Fixed

Submitted: 2020-05-20
Updated: 2020-11-24
Resolved: 2020-08-31

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

Other
openjdk8u272 b06Fixed

Related Reports

Duplicate :	JDK-8253664 - JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
Relates :	JDK-8256907 - TLSv1.3 may generate TLSInnerPlainText longer than 2^14+1 bytes
Relates :	JDK-8256908 - Unable to use custom SSLEngine with default TrustManagerFactory after updating to JDK 11 b21
Relates :	JDK-8256914 - UnsatisfiedLinkError or NoSuchAlgorithmException after removing sunec.dll
Relates :	JDK-8256666 - Curve in certificate should not affect signature scheme when using TLSv1.3
Relates :	JDK-8256668 - Delegated task created by SSLEngine throws BufferUnderflowException
Relates :	JDK-8256676 - Delegated task created by SSLEngine throws java.nio.BufferUnderflowException
Relates :	JDK-8256677 - Duplicated synchronized keywords in SSLSocketImpl
Relates :	JDK-8256681 - Finished message validation failure should be decrypt_error alert
Relates :	JDK-8256871 - SSLContextImpl.statusResponseManager should be generated if required
Relates :	JDK-8256873 - SSLSessionImpl.getLocalPrincipal() throws NPE
Relates :	JDK-8256875 - SSLSocket stream close() does not close the associated socket
Relates :	JDK-8256876 - SSLSocket#setEnabledCipherSuites is accepting empty string
Relates :	JDK-8256879 - Still unable to use custom SSLEngine with default TrustManagerFactory after JDK-8207029
Relates :	JDK-8256880 - sun.security.ssl.HandshakeHash.T12HandshakeHash constructor check backwards.
Relates :	JDK-8256882 - The size of key_exchange may be wrong on FFDHE
Relates :	JDK-8256887 - TLS 1.3 half-close and synchronization issues
Relates :	JDK-8256891 - TLS 1.3 handshake server name indication is missing on a session resume
Relates :	JDK-8256872 - SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy
Relates :	JDK-8256665 - Check session context for TLS 1.3 session resumption
Relates :	JDK-8256756 - NPE in SupportedGroupsExtension
Relates :	JDK-8256767 - Remove the temporary tls13VN field
Relates :	JDK-8256869 - SSL session resumption/SNI with TLS1.2 causes StackOverflowError
Relates :	JDK-8256878 - SSLSocketImpl erroneously wraps SocketException
Relates :	JDK-8256881 - The "supported_groups" extension in ServerHellos
Relates :	JDK-8256884 - TLS 1.3 CertificateRequest message sometimes offers disallowed signature algorithms
Relates :	JDK-8256892 - TLS 1.3 resumed session does not retain peer certificate chain
Relates :	JDK-8256684 - Improperly use of the Optional API
Relates :	JDK-8256687 - Incorrectly named signature scheme ecdsa_secp512r1_sha512
Relates :	JDK-8256689 - Increase the priorities of GCM cipher suites
Relates :	JDK-8256749 - No extensions debug log for ClientHello
Relates :	JDK-8256758 - NullPointerException in sun.security.ssl.OutputRecord.changeWriteCiphers
Relates :	JDK-8256760 - Possible race condition in TLS 1.3 session resumption
Relates :	JDK-8256800 - RSASSA-PSS certificate cannot be selected for client auth on TLSv1.2
Relates :	JDK-8256868 - SSL Handshake failures are reported with more generic SSLException
Relates :	JDK-8256646 - Errors in alert ssl message does not reflect the actual certificate status
Relates :	JDK-8256745 - Misleading code in SSLCipher
Relates :	JDK-8256915 - Unsupported ciphersuites may be offered by a TLS client
Relates :	JDK-8256898 - TLS 1.3 session resumption with hello retry request failed with "illegal_parameter"
Relates :	JDK-8256905 - TLSv1.3 fail with ClassException when EC keys are stored in PKCS11
Relates :	JDK-8256897 - TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes
Relates :	JDK-8256899 - TLSv.1.3 interop problems with OpenSSL 1.1.1 when used on the client side with mutual auth

Comments

URL: https://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/d0b56fcd1708 User: andrew Date: 2020-09-04 15:15:14 +0000

04-09-2020

URL: https://hg.openjdk.java.net/jdk8u/jdk8u-dev/jdk/rev/d0b56fcd1708 User: andrew Date: 2020-08-31 05:57:48 +0000

31-08-2020

8245468 review approval: https://mail.openjdk.java.net/pipermail/jdk8u-dev/2020-May/011773.html

05-06-2020