Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-7188658

Add possibility to disable client initiated renegotiation

    XMLWordPrintable

Details

    • b96
    • x86
    • linux

    Description

      Certicom SSL supports the possibilty to disable client initiated renegotiation
      JSSE does not support this functionality.

      WLS used to use Certicom-SSL. Now JSSE.
      Hence there is s a loss of functionality.

      Seems as if the needed work is already mostly done by one guy named Neale Rudd (http://wiki.metawerx.net/wiki/NealeRudd)

      He is talking about a patch for openjdk that delivers exactly this feature in JSSE.

      This is the mailinglist thread:
      http://mail.openjdk.java.net/pipermail/security-dev/2012-March/004645.html
      ===============

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. JDK-8019346 Reconsider the namespace for JDK-7188658

          • P3 - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. JDK-8017049 rename property jdk.tls.rejectClientInitializedRenego

          • P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JDK-8019359 To comment why not use no_renegotiation to reject client initiated renegotiation

          • P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Activity

            People

              xuelei Xuelei Fan
              tviessma Thomas Viessmann (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                Imported:
                Indexed: