JDK-8367112 : HttpClient does not support Named Groups set on SSLParameters
  • Type: Bug
  • Component: core-libs
  • Sub-Component: java.net
  • Affected Version: 21,26
  • Priority: P4
  • Status: Open
  • Resolution: Unresolved
  • OS: generic
  • CPU: generic
  • Submitted: 2025-09-08
  • Updated: 2025-09-15
Related Reports
Relates :  
JDK-8281236 - (D)TLS key exchange named groups
Relates :  
JDK-8280494 - (D)TLS signature schemes
Description
A DESCRIPTION OF THE PROBLEM :
This enhancement request is for HttpClient to honor the namedGroups set on the configured SSLParameters.

Today you can set the namedGroups on the SSLParameters like so:

final SSLParameters sslParameters = new SSLParameters();
sslParameters.setNamedGroups(new String[]{namedGroup});
return HttpClient.newBuilder()
			.sslContext(sslBundle.createSslContext())
			.sslParameters(sslParameters)
			.build();

When doing this today the namedGroups are dropped from the SSLParamters that are set on the HttpClient.

See Utils.java: https://github.com/openjdk/jdk/blob/master/src/java.net.http/share/classes/jdk/internal/net/http/common/Utils.java#L591
Comments
Signature scheme support is also missing. Both named groups and signature schemes were added between JDK 17 and JDK 21. I think they should both be supported.
15-09-2025
A pull request was submitted for review. Branch: master URL: https://git.openjdk.org/jdk/pull/27292 Date: 2025-09-15 11:29:24 +0000
15-09-2025