On Wed, 16 Sep 2026 12:13:08 GMT, Andreas Chmielewski 
<[email protected]> wrote:

>> I want to propose this enhancement. Please see the CSR.
>> 
>> ---------
>> - [x] I confirm that I make this contribution in accordance with the 
>> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai).
>
> Andreas Chmielewski has updated the pull request incrementally with one 
> additional commit since the last revision:
> 
>   Fixed derivation of SSLMasterKey

src/jdk.crypto.cryptoki/share/classes/sun/security/pkcs11/P11Tls12ExtendedMasterSecretGenerator.java
 line 84:

> 82:             throw new InvalidAlgorithmParameterException(
> 83:                     "Extended Master Secret is only supported for TLS 
> 1.2");
> 84:         }

Isn't this a tautology now? We should never enter this code for any other TLS 
version other than TLS 1.2

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/32081#discussion_r4028234520

Reply via email to