Skip to content

Commit 15bdc4d

Browse files
committed
8235448: code cleanup in SSLContextImpl.java
Reviewed-by: mbaesken Backport-of: baebce3
1 parent 5802a9a commit 15bdc4d

File tree

1 file changed

+35
-45
lines changed

1 file changed

+35
-45
lines changed

src/java.base/share/classes/sun/security/ssl/SSLContextImpl.java

+35-45
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@
2525

2626
package sun.security.ssl;
2727

28-
import java.io.*;
28+
import java.io.FileInputStream;
2929
import java.net.Socket;
3030
import java.security.*;
3131
import java.security.cert.*;
@@ -617,26 +617,6 @@ SSLEngine createSSLEngineImpl(String host, int port) {
617617
boolean isDTLS() {
618618
return false;
619619
}
620-
621-
static ProtocolVersion[] getSupportedProtocols() {
622-
if (SunJSSE.isFIPS()) {
623-
return new ProtocolVersion[] {
624-
ProtocolVersion.TLS13,
625-
ProtocolVersion.TLS12,
626-
ProtocolVersion.TLS11,
627-
ProtocolVersion.TLS10
628-
};
629-
} else {
630-
return new ProtocolVersion[]{
631-
ProtocolVersion.TLS13,
632-
ProtocolVersion.TLS12,
633-
ProtocolVersion.TLS11,
634-
ProtocolVersion.TLS10,
635-
ProtocolVersion.SSL30,
636-
ProtocolVersion.SSL20Hello
637-
};
638-
}
639-
}
640620
}
641621

642622
/*
@@ -934,9 +914,41 @@ private static List<ProtocolVersion> customizedProtocols(
934914
ProtocolVersion[] candidates;
935915
if (refactored.isEmpty()) {
936916
if (client) {
937-
candidates = getProtocols();
917+
// default client protocols
918+
if (SunJSSE.isFIPS()) {
919+
candidates = new ProtocolVersion[] {
920+
ProtocolVersion.TLS13,
921+
ProtocolVersion.TLS12,
922+
ProtocolVersion.TLS11,
923+
ProtocolVersion.TLS10
924+
};
925+
} else {
926+
candidates = new ProtocolVersion[] {
927+
ProtocolVersion.TLS13,
928+
ProtocolVersion.TLS12,
929+
ProtocolVersion.TLS11,
930+
ProtocolVersion.TLS10,
931+
ProtocolVersion.SSL30
932+
};
933+
}
938934
} else {
939-
candidates = getSupportedProtocols();
935+
if (SunJSSE.isFIPS()) {
936+
candidates = new ProtocolVersion[] {
937+
ProtocolVersion.TLS13,
938+
ProtocolVersion.TLS12,
939+
ProtocolVersion.TLS11,
940+
ProtocolVersion.TLS10
941+
};
942+
} else {
943+
candidates = new ProtocolVersion[] {
944+
ProtocolVersion.TLS13,
945+
ProtocolVersion.TLS12,
946+
ProtocolVersion.TLS11,
947+
ProtocolVersion.TLS10,
948+
ProtocolVersion.SSL30,
949+
ProtocolVersion.SSL20Hello
950+
};
951+
}
940952
}
941953
} else {
942954
// Use the customized TLS protocols.
@@ -947,25 +959,6 @@ private static List<ProtocolVersion> customizedProtocols(
947959
return getAvailableProtocols(candidates);
948960
}
949961

950-
static ProtocolVersion[] getProtocols() {
951-
if (SunJSSE.isFIPS()) {
952-
return new ProtocolVersion[]{
953-
ProtocolVersion.TLS13,
954-
ProtocolVersion.TLS12,
955-
ProtocolVersion.TLS11,
956-
ProtocolVersion.TLS10
957-
};
958-
} else {
959-
return new ProtocolVersion[]{
960-
ProtocolVersion.TLS13,
961-
ProtocolVersion.TLS12,
962-
ProtocolVersion.TLS11,
963-
ProtocolVersion.TLS10,
964-
ProtocolVersion.SSL30
965-
};
966-
}
967-
}
968-
969962
protected CustomizedTLSContext() {
970963
if (reservedException != null) {
971964
throw reservedException;
@@ -991,8 +984,6 @@ List<CipherSuite> getClientDefaultCipherSuites() {
991984
List<CipherSuite> getServerDefaultCipherSuites() {
992985
return serverDefaultCipherSuites;
993986
}
994-
995-
996987
}
997988

998989
/*
@@ -1243,7 +1234,6 @@ private abstract static class AbstractDTLSContext extends SSLContextImpl {
12431234
private static final List<CipherSuite> serverDefaultCipherSuites;
12441235

12451236
static {
1246-
// Both DTLSv1.0 and DTLSv1.2 can be used in FIPS mode.
12471237
supportedProtocols = Arrays.asList(
12481238
ProtocolVersion.DTLS12,
12491239
ProtocolVersion.DTLS10

0 commit comments

Comments
 (0)