Certificate selection should be affected by the supported groups

XMLWordPrintable

    • Type: Bug
    • Resolution: Duplicate
    • Priority: P3
    • 14
    • Affects Version/s: 11, 12, 13
    • Component/s: security-libs

      Please consider the below case,
      1. The key store contains two ECDSA certificates, which use secp256r1 and secp384r1 respectively.
      2. Limit the supported groups to sepc384r1 only.
      The ECDSA with secp256r1 certificate may be selected as unexpected.

      This issue would raise on TLSv1.2 and earlier protocols.

        1. CertSelectionTest.java
          27 kB

            Assignee:
            Xuelei Fan
            Reporter:
            John Jiang
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: