Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8210755

Define standard names for EC curves and TLS signature schemes

    Details

    • Type: Enhancement
    • Status: Resolved
    • Priority: P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 14
    • Component/s: security-libs
    • Labels:

      Description

      In the SunJSSE provider, the jdk.tls.namedGroups can be used to customize the supported groups. But there are no standard names defined for them. They can also be used in the ECGenParameterSpec API. We should define these named groups in the Standard Names Specification, or document the link to IANA page if the IANA names are used.

      Also we are extending the scope of the jdk.tls.disabledAlgorithms security property (see JDK-8226374) to allow you to restrict signature schemes, as specified in the TLS RFCs. We should add a section to the standard names specification listing the standard scheme names.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                mullan Sean Mullan
                Reporter:
                xuelei Xue-Lei Fan
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: