RE: RFR [11u backport]: 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883

2019-02-01 Thread Langer, Christoph
Thanks Sean. Pushed with the replacement as you suggested. > -Original Message- > From: Sean Mullan > Sent: Donnerstag, 31. Januar 2019 21:03 > To: Langer, Christoph ; security- > d...@openjdk.java.net > Subject: Re: RFR [11u backport]: 8217579: > TLS_EMPTY_RENEG

Re: RFR [11u backport]: 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883

2019-01-31 Thread Sean Mullan
CheckCipherSuites.java 116 // List of enabled cipher suites when the "crypto.policy" security typo: s/enabled/supported/ (I realized that typo after I had already pushed the fix to JDK 13, but better to just fix it here now). Otherwise looks good. --Sean On 1/31/19 8:36 AM, Langer, Chr

RFR [11u backport]: 8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883

2019-01-31 Thread Langer, Christoph
Hi, please review the backport of the fix for 8217579 to jdk11u. Bug: https://bugs.openjdk.java.net/browse/JDK-8217579 Webrev: http://cr.openjdk.java.net/~clanger/webrevs/8217579.11u/ Original review thread: https://mail.openjdk.java.net/pipermail/security-dev/2019-January/019256.html The patch