<html>
<head>
<base href="http://icedtea.classpath.org/bugzilla/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - JSSE server is still limited to 768-bit DHE"
href="http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2250#c6">Comment # 6</a>
on <a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - JSSE server is still limited to 768-bit DHE"
href="http://icedtea.classpath.org/bugzilla/show_bug.cgi?id=2250">bug 2250</a>
from <span class="vcard"><a class="email" href="mailto:gnu.andrew@redhat.com" title="Andrew John Hughes <gnu.andrew@redhat.com>"> <span class="fn">Andrew John Hughes</span></a>
</span></b>
<pre>(In reply to Andrew Haley from <a href="show_bug.cgi?id=2250#c5">comment #5</a>)
<span class="quote">> (In reply to Andrew John Hughes from <a href="show_bug.cgi?id=2250#c4">comment #4</a>)
> > I know, that's why I said we wouldn't use the default settings in this
> > patch. If we instead set useLegacyEphemeralDHKeys to true by default (the
> > patch sets it to false), we would get the same key size as at present i.e.
>
> The problem is that it's not possible to get a larger key size without
> changing the default; and doing that can break some other program running
> elsewhere in an app server.</span >
Sure, but at present, it's not possible to get a larger key size *at all*.
Adding this would give those who want larger key sizes the option of having
them by explicitly enabling them and dealing with any problems that result.
<span class="quote">> It's the same problem with upgrading to a newer
> JVM, but some compatibility problems might be expected in that case. Not
> for a minor change in a legacy VM.</span >
Not really, because a newer JVM affects everyone. This would only affect those
who explicitly set the property. The majority are likely to be unaware that
support for such a property was even added.
<span class="quote">>
> > Different behaviour would only occur if the user expicitly set
> > jdk.tls.ephemeralDHKeySize.
>
> Yes.
>
> > No-one is suggesting this would be an IcedTea-only change.
>
> Good.</span ></pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>