java-1.8.0-openjdk/pr1834-rh1022017.patch

29 lines
1.1 KiB
Diff
Raw Normal View History

diff --git a/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java b/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java
--- openjdk/jdk/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java
+++ openjdk/jdk/src/share/classes/sun/security/ssl/EllipticCurvesExtension.java
2017-04-21 07:56:16 +00:00
@@ -168,20 +168,10 @@
"contains no supported elliptic curves");
2017-01-24 12:38:19 +00:00
}
} else { // default curves
- int[] ids;
- if (requireFips) {
- ids = new int[] {
- // only NIST curves in FIPS mode
- 23, 24, 25, 9, 10, 11, 12, 13, 14,
- };
- } else {
- ids = new int[] {
- // NIST curves first
- 23, 24, 25, 9, 10, 11, 12, 13, 14,
- // non-NIST curves
- 22,
- };
- }
+ int[] ids = new int[] {
+ // NSS currently only supports these three NIST curves
+ 23, 24, 25
+ };
2017-01-24 12:38:19 +00:00
idList = new ArrayList<>(ids.length);
for (int curveId : ids) {