On Fri, 18 Apr 2025 13:05:24 GMT, Daniel Fuchs <dfu...@openjdk.org> wrote:

> Hi,
> 
> Please find here a PR for the implementation of JEP [JDK-8291976: HTTP/3 for 
> the HTTP Client API](https://bugs.openjdk.org/browse/JDK-8291976).
> 
> The CSR can be viewed at [JDK-8350588: Implement HTTP/3 for the HTTP Client 
> API](https://bugs.openjdk.org/browse/JDK-8350588)
> 
> This JEP proposes to enhance the HttpClient implementation to support HTTP/3.
> It adds a non-exposed / non-exported internal implementation of the QUIC 
> protocol based on DatagramChannel and the SunJSSE SSLContext provider.

src/java.base/share/classes/sun/security/ssl/CertificateMessage.java line 1221:

> 1219:                         tm.checkClientTrusted(
> 1220:                                 certs.clone(),
> 1221:                                 authType);

This call doesn't check against `SSLAlgorithmConstraints` unlike 2 calls for 
`SSLSocket` and `SSLEngine` above.

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/24751#discussion_r2054738885

Reply via email to