On Thu, 10 Sep 2026 22:18:55 GMT, Hai-May Chao <[email protected]> wrote:
>> This is to add support in SunJSSE for the TLS 1.3 ML-DSA signature schemes: >> mldsa44, mldsa65, and mldsa87. >> >> --------- >> - [x] I confirm that I make this contribution in accordance with the >> [OpenJDK Interim AI Policy](https://openjdk.org/legal/ai). > > Hai-May Chao has updated the pull request incrementally with one additional > commit since the last revision: > > Updated with Artur's comments FYI: I filed JDK-8392196 to document the problem I've noticed while reviewing this PR: A keystore containing both `ML-DSA-44`and `ML-DSA-65` keys can fail when the peer accepts only `ML-DSA-65`, even though a valid certificate exists. Because we pass only the general key family `ML-DSA` to the key manager. ------------- PR Comment: https://git.openjdk.org/jdk/pull/32529#issuecomment-5626534745
