Re: Contract of the javax.net.ssl.X509KeyManager.chooseClientAlias method

2020-12-30 Thread Thomas Fox
--- Von: "Bradford Wetmore" An: "Thomas Fox" , "security-dev" Gesendet: Montag, 28. Dezember 2020 19:42:50 Betreff: Re: Contract of the javax.net.ssl.X509KeyManager.chooseClientAlias method I haven't been following what OpenJDK has been doing recently, but IIR

Re: Contract of the javax.net.ssl.X509KeyManager.chooseClientAlias method

2020-12-28 Thread Bradford Wetmore
I haven't been following what OpenJDK has been doing recently, but IIRC, the original call includes all of the server's requested key types, copied directly from the CertificateRequest message. See: https://tools.ietf.org/rfcmarkup?doc=2246#section-7.4.4 Have a look at the current code: http

Contract of the javax.net.ssl.X509KeyManager.chooseClientAlias method

2020-12-28 Thread Thomas Fox
Hello, I have a question regarding the contract of the method javax.net.ssl.X509KeyManager.chooseClientAlias(String[] keyType, Principal[] issuers, Socket socket). This method gets called by SSL code on a client when a SSL connection is opened to a server, the server requests client authenticat