Code Review Request, JDK-8167472, Chrome interop regression with JDK-8148516

Xuelei Fan xuelei.fan at oracle.com
Tue Oct 11 06:07:16 UTC 2016



On 10/11/2016 1:44 PM, Weijun Wang wrote:
> Code change looks fine.
>
> Or you can write if (isSupported && permits)....
>
Nice coding.  Thanks!

Xuelei

> Thanks
> Max
>
> On 10/11/2016 13:06, Xuelei Fan wrote:
>> Hi,
>>
>> Please review this update:
>>
>>    http://cr.openjdk.java.net/~xuelei/8167472/webrev.00/
>>
>> The root cause is that in the update of JDK-8148516, we removed some EC
>> curves from the default supported EC curves list.  However, while select
>> the preferable curves requested by the client side, the server does not
>> check whether the curves are supported or not.  Actually, only supported
>> EC curves should be selected.
>>
>> I tested the patch with Chrome, and no new test is added.
>>
>> Thanks,
>> Xuelei


More information about the security-dev mailing list