On Thu, 22 Dec 2022 17:15:36 GMT, Anthony Scarpino <ascarp...@openjdk.org>
wrote:
>> Volker Simonis has updated the pull request incrementally with one
>> additional commit since the last revision:
>>
>> Moved stateless key logic from SSLContextImpl to SSLSessionContextImpl and
>> addressed comments by @XueleiFan and @ascarpino
>
> src/java.base/share/classes/sun/security/ssl/SessionTicketExtension.java line
> 122:
>
>> 120: try {
>> 121: KeyGenerator kg = KeyGenerator.getInstance("AES");
>> 122: kg.init(KEYLEN, hc.sslContext.getSecureRandom());
>
> I think it's important to use random from hc. Configurations with specific
> providers would not want to use a different provider for key generations.
Understood and fixed.
-------------
PR: https://git.openjdk.org/jdk/pull/11590
