provider registration

2018-02-28 Thread Bernd
Hello, there was a thread on BouncyCastle's crypto-dev mailing list how to use a custom JCA provider with Java 9+. Since there is no alternative for the lib/ext extension mechanism this is a bit tricky (if you do want to make the extension in the java.security file permanent). There are multiple

Re: [PATCH] JDK-8190917 : SSL session resumption, through handshake, in SSLEngine is broken for any protocols lesser than TLSv1.2

2018-02-28 Thread Xuelei Fan
Hi Jaikiran, As you noticed, we updated to use the ClientHello.client_version and session version for version negotiation during resumption. It's not the best option for performance, but it is a safer option for compatibility before I'm able to make further evaluation. I need more time to t