JDK-8180834 : Support the GCM cipher suites in JDK 7
  • Type: Enhancement
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 7
  • Priority: P3
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2017-05-23
  • Updated: 2021-05-11
  • Resolved: 2018-03-12
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 7
7u191 b01Fixed
Related Reports
Blocks :  
JDK-6996769 - support AEAD ciphers
Relates :  
JDK-8200684 - Support AEAD CipherSuites
Relates :  
JDK-7030966 - Support AEAD CipherSuites
Relates :  
JDK-8046105 - JEP 115: AEAD CipherSuites
Sub Tasks
JDK-8202338 :  
Release Note: Add support for TLS GCM Cipher Suites - Closed
Description
Please implement the following ciphers in JDK 7

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
TLS_DHE_DSS_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
Comments
Fix integrated as part of JDK-8200684
10-04-2018
Hi Abhi, We pushed changes to Master, we did not push to 7u201 explicitly. Thanks, Prasad.K
10-04-2018
[~pkoppula] Where's the changeset for this fix in 7u201 ? Did it went with other fix /changeset ? if so, which one ?
09-04-2018
Pushed changes to Master. Thanks, Prasad.K
12-03-2018
To be clear on Sean's previous comment. Supporting GCM cipher suites would require a backport of JDK-6996769 (aka JDK-2210924). JDK-6996769 was fixed for JDK 8, which is why it's appearing as resolved. We added the GCMParameterSpec to JDK 7. We only added a GCM IV uniqueness statement into JDK 8, so we might be able to add JCE/GCM support to JDK 7 without too much pain. Otherwise, it could be using a private instance of GCM that only the SunJSSE would use.
11-12-2017
This backport requires AES/GCM implementation support in JDK 7 so it is blocked by JDK-6996769.
08-12-2017