JDK-8209992 : Align SSLSocket and SSLEngine Javadocs
  • Type: Bug
  • Component: security-libs
  • Sub-Component: javax.net.ssl
  • Affected Version: 8
  • Priority: P4
  • Status: Resolved
  • Resolution: Fixed
  • Submitted: 2018-08-27
  • Updated: 2025-08-12
  • Resolved: 2025-08-04
The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.
JDK 26
26 b10Fixed
Related Reports
CSR :  
Relates :  
Description
Reported in OpenJDK:
  http://mail.openjdk.java.net/pipermail/security-dev/2018-August/018020.html
--------------------
SSLSocket.startHandshake() and SSLEngine.beginHandshake() are similar in that they start the TLS handshake, but they can also be used after the TLS handshake.

SSLSocket.startHandshake() Javadoc seems to be more generic, describing that the method may not only start a new handshake but also be used to update encryption keys etc.

Especially in light of TLS 1.3 where renegotiation is forbidden, I would like the Javadoc of these method to align and describe exactly when they do with respect to the TLS protocol version.


Followup discussions:
-------------
https://mail.openjdk.org/pipermail/security-dev/2018-August/018024.html
https://mail.openjdk.org/pipermail/security-dev/2018-August/018026.html

Comments
Changeset: 6c52b734 Branch: master Author: Artur Barashev <abarashev@openjdk.org> Date: 2025-08-04 13:55:58 +0000 URL: https://git.openjdk.org/jdk/commit/6c52b73465b0d0daeafc54c3c6cec3062bf490c5
04-08-2025

A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/26484 Date: 2025-07-25 16:27:42 +0000
25-07-2025