On Fri, 4 Sep 2026 18:45:00 GMT, Sean Mullan <[email protected]> wrote:
>> Main changes: >> - Adding `(SSLEngine | SSLSocket | >> SSLServerSocket).getSupportedNamedGroups()` public API methods. >> - Adding `ExtendedSSLSession.getNegotiatedNamedGroup()` public API method. >> >> Additional side-issues being addressed: >> - Repurpose currently unused NamedGroup.namesOf() method >> >> --------- >> - [x] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > src/java.base/share/classes/javax/net/ssl/ExtendedSSLSession.java line 110: > >> 108: * @return The negotiated key exchange named group name, or {@code >> null} >> 109: * if no named group was negotiated or the handshake has not >> 110: * completed > > Is it possible to get an `SSLSession` if the handshake has not completed? > Other methods like `getCipherSuite` don't say they return null if the > handshake has not completed. Currently it is technically possible to get a non-null `SSLSession` with a null named group, because named group is set after a session is assigned to the connection context. ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/32560#discussion_r3960257122
