Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLS 1.3 support for Java 8 #1254

Closed
benji opened this issue Aug 29, 2019 · 5 comments
Closed

TLS 1.3 support for Java 8 #1254

benji opened this issue Aug 29, 2019 · 5 comments
Labels
enhancement Issues that enhance the code or documentation of the repo in any way

Comments

@benji
Copy link

benji commented Aug 29, 2019

Oracle released support for TLS 1.3 in Java 11 only: http://openjdk.java.net/jeps/332

Some JDK distributions like Azul have TLS 1.3 support:
https://www.azul.com/press_release/azul-systems-brings-updated-transport-layer-security-to-java-se-8/

Maybe this project maintained by Azul Systems can be used: https://github.com/openjsse/openjsse
Maven: https://search.maven.org/search?q=g:org.openjsse

@benji
Copy link
Author

benji commented Aug 29, 2019

To add support using Azul's OpenJSSE lib:

  1. include the openjsse jar in the classpath

  2. add the OpenJSSE provider to java.security (first position):

security.provider.1=org.openjsse.net.ssl.OpenJSSE
...

@karianna karianna added the enhancement Issues that enhance the code or documentation of the repo in any way label Sep 2, 2019
@PeterLenahan
Copy link

According to this page: https://java.com/en/jre-jdk-cryptoroadmap.html
Java 8 now supports TLS v1.3

2020-07-14 | 8u261 b12 | TLS 1.3 | Added support for TLS 1.3

@aahlenst
Copy link
Contributor

That's about Oracle JDK. Reading https://bugs.openjdk.java.net/browse/JDK-8245466, the backport is proposed at OpenJDK but not yet implemented. But maybe I'm missing something.

@aahlenst
Copy link
Contributor

TLS 1.3 should have landed in 8u and is targeted for release in October:
https://mail.openjdk.java.net/pipermail/jdk8u-dev/2020-August/012568.html

It should appear in one of the next nightly builds if it hasn't already.

@karianna karianna added this to the September 2020 milestone Sep 7, 2020
codelipenghui pushed a commit to apache/pulsar that referenced this issue May 17, 2021
Fixes #10335

### Motivation

See #10335. TLSv1.3 support has been introduced in the JDK since [JDK 8 since 8u261](adoptium/temurin-build#1254 (comment)). TLS protocol TLSv1.1 and TLSv1 aren't considered secure.

### Modifications

- change default TLS protocols to TLSv1.3,TLSv1.2
- update tests, docs & config files to reflect the change
@IEnoobong
Copy link

Hi @aahlenst running

public static void main(String[] args) throws NoSuchAlgorithmException, KeyManagementException {
        SSLContext context = SSLContext.getInstance("TLS");
        context.init(null, null, null);
        String[] supportedProtocols = context.getDefaultSSLParameters().getProtocols();
        System.out.println(Arrays.toString(supportedProtocols));
    }

Prints, [TLSv1.2, TLSv1.1, TLSv1]

But my Java version should have TLSv1.3, any ideas what's wrong please?

openjdk version "1.8.0_282"
OpenJDK Runtime Environment (AdoptOpenJDK)(build 1.8.0_282-b08)
OpenJDK 64-Bit Server VM (AdoptOpenJDK)(build 25.282-b08, mixed mode)

yangl pushed a commit to yangl/pulsar that referenced this issue Jun 23, 2021
…e#10598)

Fixes apache#10335

### Motivation

See apache#10335. TLSv1.3 support has been introduced in the JDK since [JDK 8 since 8u261](adoptium/temurin-build#1254 (comment)). TLS protocol TLSv1.1 and TLSv1 aren't considered secure.

### Modifications

- change default TLS protocols to TLSv1.3,TLSv1.2
- update tests, docs & config files to reflect the change
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Issues that enhance the code or documentation of the repo in any way
Projects
None yet
Development

No branches or pull requests

5 participants