ffang opened a new pull request, #3299:
URL: https://github.com/apache/cxf/pull/3299
- TLSParameterBase: new namedGroups API (getNamedGroups/setNamedGroups) to
configure the ordered list of TLS named groups offered during the handshake
- security.xsd: new NamedGroups complex type and
<sec:namedGroups>/<sec:namedGroup>
elements on both TLSClientParametersType and TLSServerParametersType
- TLSClientParametersConfig / TLSServerParametersConfig: wire namedGroups
from XML config into SSLParameters via SSLUtils.applyNamedGroups() (JDK 20+)
- SSLUtils.applyNamedGroupsBC(): reflection-based helper to set named groups
on BC JSSE's ProvSSLEngine without a compile-time bctls-jdk18on dependency
- JettyHTTPServerEngine: override customize(SSLEngine) to call
applyNamedGroupsBC() so each accepted engine gets named groups from
tlsServerParameters configuration
- BCJsseServerALPNProcessor: ALPNProcessor.Server for BC JSSE's
ProvSSLEngine; bridges it into Jetty's ALPN negotiation
(JDK9ServerALPNProcessor only accepts java.base engines); registered via
META-INF/services; enables HTTP/2 + BC JSSE
- BCJssePQCTest + BCJsseJettyServer: system test using BC JSSE on JDK 17-26;
sets jdk.tls.namedGroups=X25519MLKEM768 before SSLContext creation so the BC
JSSE context-level named-group map includes the PQC group; verifies
X25519MLKEM768 was negotiated by restricting a raw BCSSLSocket to that group
only
- PQCTLSTest: system test for SunJSSE on JDK 27+ (JEP 527); skips
automatically when X25519MLKEM768 is absent from the configured named groups
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
