Does not work

[BruceZu]

According to the https://www.azul.com/press_release/azul-systems-brings-updated-transport-layer-security-to-java-se-8/ "it has created OpenJSSE, an open source implementation of TLS 1.3 for Java SE 8, and has included it in the latest releases of its Zulu Community and Zulu Enterprise products."
... "Zulu builds of OpenJDK 8 now include the OpenJSSE TLS 1.3 JSSE provider, which can be used to enable TLS 1.3 support with no application or code changes. "
...""“Azul is now making it possible for Java deployments to enable TLS 1.3 support in their existing Java 8-based applications without changing a line of code,“"
--- "Free Zulu Community builds of OpenJDK 8 incorporating TLS 1.3 support are available for download at https://www.azul.com/downloads/zulu."

But after I downloaded the latest version of Zulu 1.8.

$ java -version
openjdk version "1.8.0_232"
OpenJDK Runtime Environment (Zulu 8.42.0.23-CA-linux64) (build 1.8.0_232-b18)
OpenJDK 64-Bit Server VM (Zulu 8.42.0.23-CA-linux64) (build 25.232-b18, mixed mode)

I update a little in the example
as

 try {
			String TLS = "TLSv1.3";
			System.setProperty("https.protocols", TLS);

			URL url = new URL("https://172.30.71.159:443");
			new HttpsClient().connect(url);
		} catch (Exception e) {
			System.out.println(e);
		}
	}

And find it does not work
find output is

Connect to https://172.30.71.159:443 using SunJSSE provider
java.lang.IllegalArgumentException: TLSv1.3

My question is does it really work?
and is it really included in Zulu JDK 1.8?
How to use it?

[alexeybakhtin]

Hello Bruce,

By default Zulu uses default SunJSSE provider for all secure connections.
Zulu JDK 1.8 and Zulu JDK 11 have special option to enable OpenJSSE TLS 1.3 JSSE provider : -XX:+UseOpenJSSE
You can find more information about TLS1.3 support in Zulu JDK on the page : https://docs.azul.com/openjsse/Title.htm
It is also accessible from Zulu Release Notes page: https://docs.azul.com/zulu/zulurelnotes/ZuluReleaseNotes/CA_What'sNew.htm

[BruceZu]

Fixed by add one line code

 Security.insertProviderAt(new org.openjsse.net.ssl.OpenJSSE(), 4);

After refer

• https://docs.oracle.com/cd/E19830-01/819-4712/ablsc/index.html
• jre/lib/security/openjsse.security
• jre/lib/security/java.security
  -https://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/HowToImplAProvider.html#Step4

My case is to support TLSv1.3 only for a part of function, not for the whole application.