John,
the change you're referring to seems to be
https://bugs.openjdk.java.net/browse/JDK-8075750
It's fixed for 7u85 which is an upcoming JDK release.
Regards,
Sean.
On 19/05/2015 22:31, john.e.gr...@wellsfargo.com wrote:
Hi all,
On April 10 a change was committed to jdk8u that I'd like to see backported to jdk7u.
The change set is a large one:
http://hg.openjdk.java.net/jdk8u/jdk8u-dev/jdk/rev/ea62ea52af27. I don't know anything
about the background of the change. The checkin comment just says "Merge." I
don't know where it was merged from but it seems to be a bundle of unrelated changes.
The substance of the change to sun.security.ssl.ClientHandshaker is to make the triple handshake
fix check all subject alternate names of types "IP address" and "DNS" and not
just the first of each. The current behavior, introduced in in 1.7.0_71 I think, is unnecessarily
restrictive. I believe the change is just a single file.
Thanks
John Gregg