On Tue, 16 Mar 2021 23:21:40 GMT, John Jiang <jji...@openjdk.org> wrote:

>> If signature_algorithms extension is present, but the algorithms are 
>> unreconginzed or unsupported, JSSE peers should send fatal alert immediately.
>> For example, in this case, it's unnecssary to try to produce ServerHello, 
>> Certificate and ServerKeyExchange messages.
>
> John Jiang has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   TLSv1.2 CertificateRequest could fail fast if no common signature scheme 
> and add two tests for TLSv1.2 and TLSv1.3 respectively

Looks good to me.   Thanks!

-------------

Marked as reviewed by xuelei (Reviewer).

PR: https://git.openjdk.java.net/jdk/pull/2876

Reply via email to