> Per [RFC 6066 "3. Server Name Indication"], disallow IP literals in > `SNIHostName::new`. > > While the following two call-sites could be simplified by removing IP literal > checks, I've refrained from doing so because delegating some of the checks to > an exception catching mechanism would impact the performance: > > sun.security.ssl.Utilities::rawToSNIHostName > sun.net.www.protocol.https.HttpsClient::afterConnect > > [RFC 6066 "3. Server Name Indication"]: > https://www.rfc-editor.org/rfc/rfc6066.html#page-6 > > --------- > - [X] I confirm that I make this contribution in accordance with the [OpenJDK > Interim AI Policy](https://openjdk.org/legal/ai).
Volkan Yazici has refreshed the contents of this pull request, and previous commits have been removed. The incremental views will show differences compared to the previous content of the PR. The pull request contains one new commit since the last revision: Use `sun.security.x509.DNSName` in strict checks ------------- Changes: - all: https://git.openjdk.org/jdk/pull/30747/files - new: https://git.openjdk.org/jdk/pull/30747/files/8f4f1d93..7f07ab24 Webrevs: - full: https://webrevs.openjdk.org/?repo=jdk&pr=30747&range=05 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=30747&range=04-05 Stats: 14 lines in 1 file changed: 4 ins; 4 del; 6 mod Patch: https://git.openjdk.org/jdk/pull/30747.diff Fetch: git fetch https://git.openjdk.org/jdk.git pull/30747/head:pull/30747 PR: https://git.openjdk.org/jdk/pull/30747
