Looks fine to me.

There is another potential improvement to divide the ECDHE_RSA, and other KeyExAlgorithms, into two parts, the key exchange algorithm (ECDHE), certificate key algorithm (EC) and the optional certificate signature algorithms (RSA).

Thanks,
Xuelei

On 10/16/2018 1:08 AM, [email protected] wrote:
Ping...

On 2018/10/10 11:25, [email protected] wrote:
Hi,
It would be better that javax/net/ssl/TLSCommon/CipherSuite.java has an attribute on key exchange algorithm. This attribute could be used on selecting appropriate certificates by some tests.

Issue: https://bugs.openjdk.java.net/browse/JDK-8210632
Webrev: http://cr.openjdk.java.net/~jjiang/8210632/webrev.00/

Best regards,
John Jiang



Reply via email to