For my own education, where would I find the fix in Mercurial? I looked in jdk7u and jdk7u-dev but don't see it. For jdk8, I see it in jdk8u.
Thanks John -----Original Message----- From: Seán Coffey [mailto:sean.cof...@oracle.com] Sent: Tuesday, May 19, 2015 4:47 PM To: Gregg, John E.; jdk7u-dev@openjdk.java.net Subject: Re: Backporting sun.security.ssl.ClientHandshaker change to jdk7u? John, the change you're referring to seems to be https://bugs.openjdk.java.net/browse/JDK-8075750 It's fixed for 7u85 which is an upcoming JDK release. Regards, Sean. On 19/05/2015 22:31, john.e.gr...@wellsfargo.com wrote: > Hi all, > > On April 10 a change was committed to jdk8u that I'd like to see backported > to jdk7u. The change set is a large one: > http://hg.openjdk.java.net/jdk8u/jdk8u-dev/jdk/rev/ea62ea52af27. I don't > know anything about the background of the change. The checkin comment just > says "Merge." I don't know where it was merged from but it seems to be a > bundle of unrelated changes. > > The substance of the change to sun.security.ssl.ClientHandshaker is to make > the triple handshake fix check all subject alternate names of types "IP > address" and "DNS" and not just the first of each. The current behavior, > introduced in in 1.7.0_71 I think, is unnecessarily restrictive. I believe > the change is just a single file. > > Thanks > > > John Gregg > > >
