Details
-
Bug
-
Resolution: Fixed
-
P3
-
6
-
None
-
b11
Backports
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8195239 | 9.0.6 | Ivan Gerasimov | P3 | Resolved | Fixed | master |
JDK-8181716 | 9.0.4 | Ivan Gerasimov | P3 | Resolved | Fixed | b01 |
JDK-8197191 | 8u192 | Ivan Gerasimov | P3 | Resolved | Fixed | b01 |
JDK-8195400 | 8u172 | Ivan Gerasimov | P3 | Resolved | Fixed | b03 |
JDK-8190119 | 8u162 | Ivan Gerasimov | P3 | Resolved | Fixed | b04 |
JDK-8181717 | 8u161 | Ivan Gerasimov | P3 | Resolved | Fixed | b01 |
JDK-8192416 | emb-8u161 | Ivan Gerasimov | P3 | Resolved | Fixed | b01 |
JDK-8181718 | 7u171 | Ivan Gerasimov | P3 | Resolved | Fixed | b01 |
JDK-8200038 | openjdk7u | Ivan Gerasimov | P3 | Resolved | Fixed | master |
JDK-8181719 | 6u181 | Ivan Gerasimov | P3 | Resolved | Fixed | b01 |
Description
107 public final boolean permits(Set<CryptoPrimitive> primitives,
108 String algorithm, AlgorithmParameters parameters) {
109 return checkAlgorithm(disabledAlgorithms, algorithm, decomposer);
110 }
The 'parameters' argument is not used here. However, the parameters may contains security information (for example key sizes, DSA, DH, RSA parameters).
TLS implementation depends on this method to check the validity of a AlgorithmParameters. For example, in the FFDHE implementation, it is needed to check whether a DH group (DHE parameter) is available or not. If parameters checking is ignore in the constraints checking, unavailable/disabled DH groups may be requested and negotiated for a TLS/DTLS handshaking, and then the handshaking fails because the negotiated key is disabled by the constraints.
Adding the following lines to test/sun/security/ssl/DHKeyExchange/UseStrongDHSizes.java can be used as regression test.
* @run main/othervm UseStrongDHSizes 3072
* @run main/othervm UseStrongDHSizes 4096
* @run main/othervm UseStrongDHSizes 6144
Attachments
Issue Links
- backported by
-
JDK-8181716 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8181717 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8181718 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8181719 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8190119 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8192416 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8195239 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8195400 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8197191 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
-
JDK-8200038 Check the AlgorithmParameters in algorithm constraints
-
- Resolved
-
- blocks
-
JDK-8140436 Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
-
- Resolved
-