Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-4873188

Support TLS 1.1

    XMLWordPrintable

Details

    • b118
    • generic
    • generic
    • Verified

    Description

      TLS 1.1 (http://www.ietf.org/internet-drafts/draft-ietf-tls-rfc2246-bis-04.txt) will complete WG last call on June 10, 2003. We should support it when standardization is complete.
      TLS 1.1 was issued as the Standards Track in April 2006, RFC 4346. http://www.ietf.org/rfc/rfc4346.txt. The major changes from TLS 1.0 are:

         - The implicit Initialization Vector (IV) is replaced with an
            explicit IV to protect against CBC attacks [CBCATT].

         - Handling of padding errors is changed to use the bad_record_mac
            alert rather than the decryption_failed alert to protect against
            CBC attacks.

         - IANA registries are defined for protocol parameters.

         - Premature closes no longer cause a session to be nonresumable.

         - Additional informational notes were added for various new attacks
            on TLS.

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. JDK-4885061 JSSE does not renegotate after hitting 2^64-1 sequenced packets.

          • P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JDK-4795142 create JSSE standard names for ECC algorithms.

          • P5 - Cosmetic problem like misspelt words or misaligned text.
          • Closed

          Enhancement - null JDK-6186434 Should update with list of known ciphersuites

          • P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. JDK-6976117 SSLContext.getInstance("TLSv1.1") returns SSLEngines/SSLSockets without TLSv1.1 enabled

          • P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JDK-6976118 version number tolerance in the PreMasterSecret

          • P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JDK-6976121 TLS client should not use the negotiated protocol version for session resumption

          • P3 - Major loss of function.
          • Closed

          Activity

            People

              xuelei Xuelei Fan
              andreas Andreas Sterbenz
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: