Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8341346 Add support for exporting TLS Keying Material
  3. JDK-8356668

Release Note: Add Support for TLS Keying Material Exporters to JSSE and SunJSSE Provider

XMLWordPrintable

      Enhancement JDK-8341346 adds support for TLS (Transport Layer Security) Keying Material Exporters, which allow applications to generate additional application-level keying material from a connection's negotiated TLS keys.

      This change enables a number of additional protocols, including those registered in the [IANA TLS Parameters-Exporter Label](https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#exporter-labels) document. This document lists labels defined in many RFCs, such as
      [5216](https://www.rfc-editor.org/rfc/rfc5216.html)/[6347](https://www.rfc-editor.org/rfc/rfc6347.html)/[5281](https://www.rfc-editor.org/rfc/rfc5281.html),
      [5764](https://www.rfc-editor.org/rfc/rfc5764.html),
      [6083](https://www.rfc-editor.org/rfc/rfc6083.html),
      [8471](https://www.rfc-editor.org/rfc/rfc8471.html),
      [9431](https://www.rfc-editor.org/rfc/rfc9431.html),
      [9190](https://www.rfc-editor.org/rfc/rfc9190.html),
      [9261](https://www.rfc-editor.org/rfc/rfc9261.html),
      [9427](https://www.rfc-editor.org/rfc/rfc9427.html),
      [5G JWE-JSON Web Encryption](https://www.tech-invite.com/3m33/toc/tinv-3gpp-33-501_zk.html#e-13-2-4-4-1), and other Machine-to-Machine (M2M) entries.

      This functionality is described in [RFC 5705](https://www.rfc-editor.org/rfc/rfc5705.html) for TLSv1-TLSv1.2, and [RFC 8446](https://www.rfc-editor.org/rfc/rfc8446.html) for TLSv1.3, and can be accessed via two new APIs in the `javax.net.ssl.ExtendedSSLSession` class.

            wetmore Bradford Wetmore
            wetmore Bradford Wetmore
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: