Bug ID: JDK-8273156 Release Note: Call `X509KeyManager.chooseClientAlias` Once for All Key Types

Type: Sub-task
Component: security-libs
Sub-Component: javax.net.ssl
Affected Version:
8u401,8u401-perf,11.0.22-oracle,17.0.10-oracle,18 8u401,8u401-perf,11.0.22-oracle,17.0.10-oracle,18

Priority: P4
Status: Resolved
Resolution: Delivered

Submitted: 2021-08-30
Updated: 2023-12-15
Resolved: 2023-12-13

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

JDK 11	JDK 17	JDK 18	JDK 8
11.0.22-oracleResolved	17.0.10-oracleResolved	18Resolved	8u401Resolved

The (D)TLS implementation in JDK now calls `X509KeyManager.chooseClientAlias()` only once during handshaking for client authentication, even if there are multiple algorithms requested .