JDK-6976118 : version number tolerance in the PreMasterSecret
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 7
  • Priority: P3
  • Status: Closed
  • Resolution: Not an Issue
  • OS: generic
  • CPU: generic
  • Submitted: 2010-08-11
  • Updated: 2016-10-05
  • Resolved: 2011-02-22
Related Reports
Relates :  
JDK-6996382 - TLS 1.2 implementation cleanup
Relates :  
JDK-6916074 - Add support for TLS 1.2
Relates :  
JDK-4873188 - Support TLS 1.1
Description
For interoperability, we need to have SunJSSE server tolerant to Microsoft IE 8's inappropriate version number in PreMasterSecret during abbreviated handshake.

See comments.
Comments
EVALUATION Microsoft has been aware of the issue. The best approach is to fix the bug in Microsoft products rather than to tolerate the wrong implementation in Oracle products. Close the CR as "not a defect". We will not address the CR unless we get customer escalation.
22-02-2011