Blame pr1834-rh1022017.patch
|
Alex Kashchenko |
b2432ba |
diff --git a/src/share/classes/sun/security/ssl/SupportedEllipticCurvesExtension.java b/src/share/classes/sun/security/ssl/SupportedEllipticCurvesExtension.java
|
|
Alex Kashchenko |
b2432ba |
--- openjdk/jdk/src/share/classes/sun/security/ssl/SupportedEllipticCurvesExtension.java
|
|
Alex Kashchenko |
b2432ba |
+++ openjdk/jdk/src/share/classes/sun/security/ssl/SupportedEllipticCurvesExtension.java
|
|
Alex Kashchenko |
b2432ba |
@@ -160,20 +160,10 @@
|
|
Alex Kashchenko |
b2432ba |
}
|
|
Alex Kashchenko |
b2432ba |
}
|
|
Alex Kashchenko |
b2432ba |
} else { // default curves
|
|
Alex Kashchenko |
b2432ba |
- int[] ids;
|
|
Alex Kashchenko |
b2432ba |
- if (requireFips) {
|
|
Alex Kashchenko |
b2432ba |
- ids = new int[] {
|
|
Alex Kashchenko |
b2432ba |
- // only NIST curves in FIPS mode
|
|
Alex Kashchenko |
b2432ba |
- 23, 24, 25, 9, 10, 11, 12, 13, 14,
|
|
Alex Kashchenko |
b2432ba |
- };
|
|
Alex Kashchenko |
b2432ba |
- } else {
|
|
Alex Kashchenko |
b2432ba |
- ids = new int[] {
|
|
Alex Kashchenko |
b2432ba |
- // NIST curves first
|
|
Alex Kashchenko |
b2432ba |
- 23, 24, 25, 9, 10, 11, 12, 13, 14,
|
|
Alex Kashchenko |
b2432ba |
- // non-NIST curves
|
|
Alex Kashchenko |
b2432ba |
- 22,
|
|
Alex Kashchenko |
b2432ba |
- };
|
|
Alex Kashchenko |
b2432ba |
- }
|
|
Alex Kashchenko |
b2432ba |
+ int[] ids = new int[] {
|
|
Alex Kashchenko |
b2432ba |
+ // NSS currently only supports these three NIST curves
|
|
Alex Kashchenko |
b2432ba |
+ 23, 24, 25
|
|
Alex Kashchenko |
b2432ba |
+ };
|
|
akashche |
02bc7e2 |
|
|
Alex Kashchenko |
b2432ba |
idList = new ArrayList<>(ids.length);
|
|
Alex Kashchenko |
b2432ba |
for (int curveId : ids) {
|