[JDK-8262509] JSSE Server should check the legacy version in TLSv1.3 ClientHello - Java Bug System

XML

Word

Printable

Details

Type: Bug
Status: Resolved
Priority: P4
Resolution: Fixed
Affects Version/s: 16, 17
Fix Version/s: 17
Component/s: security-libs
Labels:
- noreg-hard
- tencent-interest

Subcomponent:
javax.net.ssl
Resolved In Build:
b12

Description

Per RFC 8446, section 4.1.2, the legacy_version field in ClientHello message MUST be set to 0x0303, which is the version number for TLS 1.2.
T13ClientHelloConsumer should do this check like that T13ServerHelloConsumer does.

Attachments

Issue Links

links to

Commit openjdk/jdk/353416ff

Review openjdk/jdk/2772

Activity

People

Assignee:: John Jiang

Reporter:: John Jiang

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Dates

Created:: 2021-02-28 18:15

Updated:: 2021-03-08 10:54

Resolved:: 2021-03-01 14:26