Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8212885

TLS 1.3 resumed session does not retain peer certificate chain

    XMLWordPrintable

Details

    • b20
    • Verified

    Backports

      Description

        TLS 1.3 resumed sessions are not preserving the peer certificate chain that is held in the initial SSLSession object created from the initial handshake. The SSLSession object pulled from the resumed session will throw SSLPeerUnverifiedException when SSLSession.getPeerCertificates() or SSLSession.getPeerPrincipal() methods are invoked.

        Attachments

          Issue Links

            backported by

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8214060 TLS 1.3 resumed session does not retain peer certificate chain

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8218093 TLS 1.3 resumed session does not retain peer certificate chain

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8243713 TLS 1.3 resumed session does not retain peer certificate chain

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8247046 TLS 1.3 resumed session does not retain peer certificate chain

            • P3 - Major loss of function.
            • Resolved

            Backport - A issue that is required to port a Bug or Feature into another product release. This issue type is generally associated with the main Bug/Feature to represent each individual release of the port. JDK-8256892 TLS 1.3 resumed session does not retain peer certificate chain

            • P3 - Major loss of function.
            • Closed
            duplicates

            Bug - A problem which impairs or prevents the functions of the product. JDK-8220723 SSLSession.getPeerCertificates() throws SSLPeerUnverifiedException if a pre_shared_key was used

            • P3 - Major loss of function.
            • Closed
            relates to

            Bug - A problem which impairs or prevents the functions of the product. JDK-8215933 TLS Session Resumption loses track of SSLSession values

            • P4 - Minor loss of function, or other problem where easy workaround is present.
            • In Progress

            Activity

              People

                jnimeh Jamil Nimeh
                jnimeh Jamil Nimeh
                Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: