Integrated: 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled

2025-04-17 Thread Artur Barashev
On Thu, 3 Apr 2025 19:05:59 GMT, Artur Barashev wrote: > MD5 algorithm is prohibited by TLSv1.3 RFC to be used in certificates: > > > Any endpoint receiving any certificate which it would need to > validate using any signature algorithm using an MD5 hash MUST abort > the handshake with a "bad_c

Re: RFR: 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled [v12]

2025-04-17 Thread duke
On Thu, 17 Apr 2025 01:36:30 GMT, Artur Barashev wrote: >> MD5 algorithm is prohibited by TLSv1.3 RFC to be used in certificates: >> >> >> Any endpoint receiving any certificate which it would need to >> validate using any signature algorithm using an MD5 hash MUST abort >> the handshake with a

Re: RFR: 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled [v11]

2025-04-17 Thread Artur Barashev
On Wed, 16 Apr 2025 22:03:07 GMT, Mark Powers wrote: >> Artur Barashev has updated the pull request incrementally with one >> additional commit since the last revision: >> >> Further optimization: remove unnecessary updates > > test/jdk/javax/net/ssl/HttpsURLConnection/CriticalSubjectAltName.

Re: RFR: 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled [v12]

2025-04-17 Thread Sean Mullan
On Thu, 17 Apr 2025 01:36:30 GMT, Artur Barashev wrote: >> MD5 algorithm is prohibited by TLSv1.3 RFC to be used in certificates: >> >> >> Any endpoint receiving any certificate which it would need to >> validate using any signature algorithm using an MD5 hash MUST abort >> the handshake with a

Re: RFR: 8350807: Certificates using MD5 algorithm that are disabled by default are incorrectly allowed in TLSv1.3 when re-enabled [v11]

2025-04-17 Thread Artur Barashev
On Wed, 16 Apr 2025 22:01:04 GMT, Mark Powers wrote: >> Artur Barashev has updated the pull request incrementally with one >> additional commit since the last revision: >> >> Further optimization: remove unnecessary updates > > test/jdk/sun/security/ssl/SignatureScheme/MD5NotAllowedInTLS13Cer