Loading...

XML

Word

Printable

Type: Enhancement
Resolution: Fixed
Priority: P2
Fix Version/s: 16
Affects Version/s: None
Component/s: security-libs
Labels:

Subcomponent:
javax.net.ssl
Resolved In Build:
b26

Issue	Fix Version	Assignee	Priority	Status	Resolution	Resolved In Build
JDK-8263542	15.0.3	Sean Mullan	P2	Resolved	Fixed	b02
JDK-8264585	13.0.8	Yuri Nesterenko	P2	Resolved	Fixed	b01
JDK-8256577	11.0.11-oracle	Sean Coffey	P2	Closed	Fixed	b01
JDK-8258597	11.0.11	Severin Gehwolf	P2	Resolved	Fixed	b01
JDK-8258598	openjdk8u292	Martin Balao Alonso	P2	Resolved	Fixed	b01
JDK-8256748	8u291	Sean Coffey	P2	Closed	Fixed	b01
JDK-8262617	emb-8u291	Sean Coffey	P2	Resolved	Fixed	team
JDK-8256750	7u301	Sean Coffey	P2	Closed	Fixed	b01
JDK-8265143	openjdk7u	Sean Mullan	P2	Resolved	Fixed	master

Disable TLS 1.0 and 1.1 by default. These versions of TLS have weakened over time and lack support for stronger, more modern algorithms. The IETF is in the process of deprecating these versions, see https://datatracker.ietf.org/doc/draft-ietf-tls-oldversions-deprecate/ for the latest Internet draft.

Disabling DTLS 1.0 should also be considered but under a different bugid.

backported by

JDK-8258597 Disable TLS 1.0 and 1.1

Resolved

JDK-8258598 Disable TLS 1.0 and 1.1

Resolved

JDK-8262617 Disable TLS 1.0 and 1.1

Resolved

JDK-8263542 Disable TLS 1.0 and 1.1

Resolved

JDK-8264585 Disable TLS 1.0 and 1.1

Resolved

JDK-8265143 Disable TLS 1.0 and 1.1

Resolved

JDK-8256577 Disable TLS 1.0 and 1.1

Closed

JDK-8256748 Disable TLS 1.0 and 1.1

Closed

JDK-8256750 Disable TLS 1.0 and 1.1

Closed

csr for

JDK-8254713 Disable TLS 1.0 and 1.1

Closed

relates to

JDK-8256682 JDK-8202343 is incomplete

Resolved

JDK-8257083 Security infra test failures caused by JDK-8202343

Resolved

JDK-8214140 Remove TLS v1 and v1.1 from SSLContext required algorithms

Resolved

JDK-8256660 Disable DTLS 1.0

Resolved

JDK-8273413 SunJSSE Provider protocol list out of date

Resolved

JDK-8272443 SMTP doesn't work since JDK 11.0.11 by default because of disabled TLS protocols

Closed

links to

Commit openjdk/jdk13u-dev/fecca4ec

Commit openjdk/jdk/3a4b90f0

Review openjdk/jdk13u-dev/143

Review openjdk/jdk/1235

RFC

(4 backported by, 1 csr for, 6 relates to, 5 links to)

1.	Add TLS 1.0 and 1.1 to the jdk.tls.legacyAlgorithms security property	Closed	Unassigned
2.	Evaluate test impact with TLS 1.0 and 1.1 disabled	Resolved	Rajan Halade	2019-09-30
3.	Release Note: Disable TLS 1.0 and 1.1	Closed	Sean Mullan

Assignee:: Sean Mullan
Reporter:: Sean Mullan
Votes:: 0 Vote for this issue
Watchers:: 12 Start watching this issue

Created:: 2018-04-26 12:17
Updated:: 2024-12-20 10:04
Resolved:: 2020-11-19 06:17

Details

Backports

Description

Attachments

Issue Links

Sub-Tasks

Activity

People

Dates