"The named elliptic curve groups `x25519` and `x448` are now available
for JSSE key agreement in TLS versions 1 to 1.3, ..."
---------
I may use "TLS version 1.0".
"**KNOWN ISSUE:** TLS_ECDH_* ciphersuites have been deprecated by the
IETF [RFC 8422](https://tools.ietf.org/html/rfc8422). The current JSSE
APIs do not support selection of static server keys required by the
TLS_ECDH_* ciphersuites. Therefore, ECDH_* ciphersuites using
x25519/x448 keys are not supported on the server side for XDH
(x25519/x448). "
---------
In the release note, there is a "Known Issues" category. I may use the
category for this known issue, by filing a new bug and a release-note
sub-task with the "RN-KnownIssue" label.
The first two sentences might be arguable. I may use a simple note, for
example:
"**KNOWN ISSUE:** For TLS 1.2 and prior versions, the ECDH key exchange
algorithms, for example ECDH_RSA and ECDH_ECDSA cipher suites, using
static x25519/x448 keys are not supported on the server side."
Otherwise, looks fine to me.
Thanks,
Xuelei
On 6/17/2019 5:37 PM, Bradford Wetmore wrote:
Hi,
Please review the release note for adding x25519/x448 named groups to
TLS/JSSE:
https://bugs.openjdk.java.net/browse/JDK-8225764
Thanks,
Brad
