On Tue, 28 Oct 2025 21:13:02 GMT, Artur Barashev <[email protected]> wrote:

>> test/jdk/sun/security/ssl/CipherSuite/RestrictNamedGroup.java line 101:
>> 
>>> 99:             runAndCheckException(() -> new RestrictNamedGroup().run(),
>>> 100:                     ex -> assertTrue(ex instanceof NoClassDefFoundError
>>> 101:                             || ex instanceof 
>>> ExceptionInInitializerError));
>> 
>> I don't understand this change, can you help me understand this better? Why 
>> would these exceptions be thrown now?
>
> We do `NamedGroup` constraints check in `NamedGroup.SupportedGroups` now, so 
> the test fails during `SSLConfiguration` object construction and not during 
> TLS handshake as before. One exception is thrown with TLSv1.2 and another 
> with TLSv1.3.

Hmm, I still need more info. Is this a behavior or specification change? Does a 
standard JSSE API now throw these exceptions instead of `SSLException`?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/27961#discussion_r2471083500

Reply via email to