-
Bug
-
Resolution: Duplicate
-
P3
-
8u261, 11, 16
-
b05
ADDITIONAL SYSTEM INFORMATION :
CentOS Linux release 8.0.1905
MacOS catalina 10.15.7
A DESCRIPTION OF THE PROBLEM :
In this version TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 are incompatible with previous.
Some HTTPS sites, for example, https://fcm.googleapis.com, returns the handshake error when using these two ciphers.
REGRESSION : Last worked in version 8
STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Use TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 as supported cipher to connect https://fcm.googleapis.com. And will receive a TLS handshake error.
---------- BEGIN SOURCE ----------
@Test
public void sslSocketTest() throws IOException {
SSLSocket socket = (SSLSocket) SSLSocketFactory.getDefault().createSocket();
socket.setEnabledCipherSuites(new String[] {
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
});
InetSocketAddress socketAddress =new InetSocketAddress("fcm.googleapis.com",443);
socket.connect(socketAddress);
socket.startHandshake();
socket.close();
}
---------- END SOURCE ----------
FREQUENCY : always
CentOS Linux release 8.0.1905
MacOS catalina 10.15.7
A DESCRIPTION OF THE PROBLEM :
In this version TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 are incompatible with previous.
Some HTTPS sites, for example, https://fcm.googleapis.com, returns the handshake error when using these two ciphers.
REGRESSION : Last worked in version 8
STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
Use TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 as supported cipher to connect https://fcm.googleapis.com. And will receive a TLS handshake error.
---------- BEGIN SOURCE ----------
@Test
public void sslSocketTest() throws IOException {
SSLSocket socket = (SSLSocket) SSLSocketFactory.getDefault().createSocket();
socket.setEnabledCipherSuites(new String[] {
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
});
InetSocketAddress socketAddress =new InetSocketAddress("fcm.googleapis.com",443);
socket.connect(socketAddress);
socket.startHandshake();
socket.close();
}
---------- END SOURCE ----------
FREQUENCY : always
- duplicates
-
JDK-8217633 Configurable extensions with system properties
-
- Resolved
-