8373426: Remove ffdhe6144 and ffdhe8192 from default list of TLS named groups

Reviewed-by: mullan, jnimeh
This commit is contained in:
Kirill Shirokov 2026-05-27 18:45:04 +00:00 committed by Sean Mullan
parent e495051635
commit 2d97d4e7f8
3 changed files with 4 additions and 10 deletions

View File

@ -880,9 +880,7 @@ enum NamedGroup {
// FFDHE (RFC 7919)
FFDHE_2048,
FFDHE_3072,
FFDHE_4096,
FFDHE_6144,
FFDHE_8192
FFDHE_4096
};
// Filter default groups names against default constraints.

View File

@ -52,9 +52,7 @@ public class DefaultNamedGroups extends SSLEngineTemplate {
"x448",
"ffdhe2048",
"ffdhe3072",
"ffdhe4096",
"ffdhe6144",
"ffdhe8192")
"ffdhe4096")
.sorted()
.toList();

View File

@ -1,5 +1,5 @@
/*
* Copyright (c) 2017, Oracle and/or its affiliates. All rights reserved.
* Copyright (c) 2017, 2026, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
@ -28,7 +28,7 @@
/*
* @test
* @bug 8140436
* @bug 8140436 8373426
* @modules jdk.crypto.ec
* @library /javax/net/ssl/templates
* @summary Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for TLS
@ -47,10 +47,8 @@
* @run main/othervm -Djdk.tls.namedGroups=ffdhe4096 UseStrongDHSizes 4096
* @run main/othervm -Djdk.tls.namedGroups=ffdhe6144 UseStrongDHSizes 4096
* @run main/othervm -Djdk.tls.namedGroups=ffdhe8192 UseStrongDHSizes 4096
* @run main/othervm UseStrongDHSizes 6144
* @run main/othervm -Djdk.tls.namedGroups=ffdhe6144 UseStrongDHSizes 6144
* @run main/othervm -Djdk.tls.namedGroups=ffdhe8192 UseStrongDHSizes 6144
* @run main/othervm UseStrongDHSizes 8192
* @run main/othervm -Djdk.tls.namedGroups=ffdhe8192 UseStrongDHSizes 8192
*/