Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8365955

Do not send signature_algorithms_cert extension if not required

XMLWordPrintable

    • Icon: Enhancement Enhancement
    • Resolution: Unresolved
    • Icon: P4 P4
    • None
    • None
    • security-libs
    • None

      The TLS 1.3 spec says that the signature_algorithms_cert defaults to the algorithms configured in signature_algorithms; we could could send signature_algorithms alone unless we're configured to permit different algorithms in both cases.

      As one specific example, currently for TLS 1.3 handshakes we remove the RSA_PKCS1 signature schemes from signature_algorithms and only send them in signature_algorithms_cert. However, the spec permits sending RSA_PKCS1 algorithms in signature_algorithms, and some existing TLS implementations do that to avoid sending both extensions.

            abarashev Artur Barashev
            djelinski Daniel Jelinski
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: