-
Bug
-
Resolution: Fixed
-
P3
-
8, 11, 17, 20, 21, 22
-
b12
-
Verified
Currently when the server needs client authentication and the client does not produce any certificates, the connection is aborted with "bad_certificate" alert.
I checked the TLS1.0-1.3 specs; 1.0-1.2 recommend handshake_failure, and 1.3 recommends certificate_required alert.
Additionally, [TLS1.3]:
If the server supplies an empty Certificate message, the client MUST abort the handshake with a "decode_error" alert.
I checked the TLS1.0-1.3 specs; 1.0-1.2 recommend handshake_failure, and 1.3 recommends certificate_required alert.
Additionally, [TLS1.3]:
If the server supplies an empty Certificate message, the client MUST abort the handshake with a "decode_error" alert.
- duplicates
-
JDK-8325079 Alerts on client auth may not conform to the RFCs
- Closed
- relates to
-
JDK-8326699 Problemlist CertMsgCheck.java
- Resolved
-
JDK-8326705 Test CertMsgCheck.java fails to find alert certificate_required
- Resolved
- links to
-
Commit openjdk/jdk/f62b5789
-
Review openjdk/jdk/17717
-
Review(master) openjdk/jdk21u-dev/932
(1 links to)