> If signature_algorithms extension is present, but the algorithms are 
> unreconginzed or unsupported, JSSE peers should send fatal alert immediately.
> For example, in this case, it's unnecssary to try to produce ServerHello, 
> Certificate and ServerKeyExchange messages.

John Jiang has updated the pull request incrementally with one additional 
commit since the last revision:

  TLSv1.2 CertificateRequest could fail fast if no common signature scheme and 
add two tests for TLSv1.2 and TLSv1.3 respectively

-------------

Changes:
  - all: https://git.openjdk.java.net/jdk/pull/2876/files
  - new: https://git.openjdk.java.net/jdk/pull/2876/files/bed8a7b7..a0552d45

Webrevs:
 - full: https://webrevs.openjdk.java.net/?repo=jdk&pr=2876&range=01
 - incr: https://webrevs.openjdk.java.net/?repo=jdk&pr=2876&range=00-01

  Stats: 485 lines in 5 files changed: 473 ins; 0 del; 12 mod
  Patch: https://git.openjdk.java.net/jdk/pull/2876.diff
  Fetch: git fetch https://git.openjdk.java.net/jdk pull/2876/head:pull/2876

PR: https://git.openjdk.java.net/jdk/pull/2876

Reply via email to