On Thu, 10 Sep 2026 03:37:29 GMT, Hai-May Chao <[email protected]> wrote:

>> This is to add support in SunJSSE for the TLS 1.3 ML-DSA signature schemes: 
>> mldsa44, mldsa65, and mldsa87.
>> 
>> ---------
>> - [x] I confirm that I make this contribution in accordance with the 
>> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai).
>
> Hai-May Chao has updated the pull request incrementally with one additional 
> commit since the last revision:
> 
>   Updated with Artur's comment

src/java.base/share/classes/sun/security/ssl/X509Authentication.java line 367:

> 365: 
> 366:             PublicKey serverPublicKey = serverCerts[0].getPublicKey();
> 367:             if (!shc.negotiatedProtocol.useTLS13PlusSpec() &&

This change looks redundant: restricting signature schemes by the protocol 
version is done in `SignatureScheme.java`

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/32529#discussion_r3981400958

Reply via email to