-
Bug
-
Resolution: Fixed
-
P3
-
19
-
b15
-
Verified
Issue | Fix Version | Assignee | Priority | Status | Resolution | Resolved In Build |
---|---|---|---|---|---|---|
JDK-8284659 | 17.0.4-oracle | Prajwal Kumaraswamy | P3 | Resolved | Fixed | b03 |
JDK-8285894 | 17.0.4 | Martin Doerr | P3 | Resolved | Fixed | b01 |
JDK-8284657 | 11.0.16-oracle | Prajwal Kumaraswamy | P3 | Resolved | Fixed | b03 |
JDK-8286648 | 11.0.16 | Martin Doerr | P3 | Resolved | Fixed | b03 |
JDK-8285426 | 8u341 | Prajwal Kumaraswamy | P3 | Resolved | Fixed | b04 |
JDK-8288183 | 8u333 | Prajwal Kumaraswamy | P3 | Closed | Fixed | b32 |
1) The domain value in system property "jdk.https.negotiate.cbt=domain:<domains>" is CASE sensitive and looks for exact match.
2) HTTP Client should quit early when "jdk.https.negotiate.cbt" refer an INVALID value. Ex: jdk.https.negotiate.cbt=Xyz. It fails with response code 401 after 20 attempts.
3) HTTP Client should quit early when "jdk.https.negotiate.cbt=never" for a URL configured with EAP=REQUIRED. It fails with response code 401 after 20 attempts.
4) HTTP Client should quit early when "jdk.https.negotiate.cbt=domain:<domains>" contain INVALID/INCORRECT domain names for a URL configured with EAP=REQUIRED. It fails with response code 401 after 20 attempts.
5) When the system property "http.auth.preference" set to NTLM for a URL configured with EAP=REQUIRED, it fails. But, it pass with "http.auth.preference" set to Kerberos and Negotiate.
- backported by
-
JDK-8284657 Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
- Resolved
-
JDK-8284659 Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
- Resolved
-
JDK-8285426 Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
- Resolved
-
JDK-8285894 Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
- Resolved
-
JDK-8286648 Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
- Resolved
-
JDK-8288183 Domain value for system property jdk.https.negotiate.cbt should be case-insensitive
- Closed
- relates to
-
JDK-8282297 Support EAP over NTLM for HTTPS Channel Binding
- Open
-
JDK-8282298 Standard retry count for credential failure need reconsideration
- Open
-
JDK-8279842 HTTPS Channel Binding support for Java GSS/Kerberos
- Resolved
- links to
-
Commit openjdk/jdk11u-dev/e793096f
-
Commit openjdk/jdk17u-dev/40c7bf25
-
Commit openjdk/jdk/86015e15
-
Review openjdk/jdk11u-dev/1076
-
Review openjdk/jdk17u-dev/350
-
Review openjdk/jdk/7759