---
Von: "Bradford Wetmore"
An: "Thomas Fox" , "security-dev"
Gesendet: Montag, 28. Dezember 2020 19:42:50
Betreff: Re: Contract of the javax.net.ssl.X509KeyManager.chooseClientAlias
method
I haven't been following what OpenJDK has been doing recently, but IIR
I haven't been following what OpenJDK has been doing recently, but IIRC,
the original call includes all of the server's requested key types,
copied directly from the CertificateRequest message. See:
https://tools.ietf.org/rfcmarkup?doc=2246#section-7.4.4
Have a look at the current code:
http
Hello,
I have a question regarding the contract of the method
javax.net.ssl.X509KeyManager.chooseClientAlias(String[] keyType, Principal[]
issuers, Socket socket). This method gets called by SSL code on a client when a
SSL connection is opened to a server, the server requests client authenticat