You are viewing a plain text version of this content. The canonical link for it is here.
Posted to httpclient-users@hc.apache.org by Koji Kawamura <ij...@apache.org> on 2019/07/11 07:19:50 UTC
TLS 1.3 with Java 11
Hello,
I found a comment on in the 5.0-BETA4 release note:
* Resolved compatibility issues with TLS 1.3 engine shipped with Java 11
Contributed by Oleg Kalnichevski <olegk at apache.org>
https://archive.apache.org/dist/httpcomponents/httpcore/RELEASE_NOTES-5.0.x.txt
Is there any JIRA specifically addressing this issue?
I could only find this one, but the release note comment sounds like
there are others.
https://issues.apache.org/jira/browse/HTTPCLIENT-1967
Also, I'd like to know if TLS 1.3 with Java 11 is (or will be?)
supported by HttpAsyncClient.
Best,
Koji
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org
Re: TLS 1.3 with Java 11
Posted by Oleg Kalnichevski <ol...@apache.org>.
On Fri, 2019-07-12 at 16:07 +0900, Koji Kawamura wrote:
> Hi Oleg,
>
> Thanks for your quick response as always.
>
> After I upgraded JDK to 11.0.3, TLS 1.3 started working even with
> HttpAsyncClient 4.1.3 and HttpCore 4.5.3.
> Glad to know that the JDK issue has been fixed and back-ported.
> https://bugs.openjdk.java.net/browse/JDK-8212885
>
Hi Koji
That is curious. I had to tweak non-blocking SSL code in HttpCore quite
a bit in order to get it to work with Java 11.0.2. But if 11.0.3 works
without any of those tweaks, it is even better.
Cheers
Oleg
> Best,
> Koji
>
> On Thu, Jul 11, 2019 at 7:01 PM Oleg Kalnichevski <ol...@apache.org>
> wrote:
> >
> > On Thu, 2019-07-11 at 16:19 +0900, Koji Kawamura wrote:
> > > Hello,
> > >
> > > I found a comment on in the 5.0-BETA4 release note:
> > >
> > > * Resolved compatibility issues with TLS 1.3 engine shipped with
> > > Java
> > > 11
> > > Contributed by Oleg Kalnichevski <olegk at apache.org>
> > >
> >
> >
https://archive.apache.org/dist/httpcomponents/httpcore/RELEASE_NOTES-5.0.x.txt
> > >
> > > Is there any JIRA specifically addressing this issue?
> > > I could only find this one, but the release note comment sounds
> > > like
> > > there are others.
> > > https://issues.apache.org/jira/browse/HTTPCLIENT-1967
> > >
> >
> > The only one that truly matters is this one
> >
> > https://bugs.openjdk.java.net/browse/JDK-8212885
> >
> >
> > > Also, I'd like to know if TLS 1.3 with Java 11 is (or will be?)
> > > supported by HttpAsyncClient.
> > >
> >
> > HttpAsyncClient 4.1.4 should be fully TLSv1.3 / Java11 compatible
> > but
> > one needs to upgrade its HttpCore dependency to version 4.4.11.
> >
> > Cheers
> >
> > Oleg
> >
> >
> >
> > -----------------------------------------------------------------
> > ----
> > To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
> > For additional commands, e-mail:
> > httpclient-users-help@hc.apache.org
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
> For additional commands, e-mail: httpclient-users-help@hc.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org
Re: TLS 1.3 with Java 11
Posted by Koji Kawamura <ij...@gmail.com>.
Hi Oleg,
Thanks for your quick response as always.
After I upgraded JDK to 11.0.3, TLS 1.3 started working even with
HttpAsyncClient 4.1.3 and HttpCore 4.5.3.
Glad to know that the JDK issue has been fixed and back-ported.
https://bugs.openjdk.java.net/browse/JDK-8212885
Best,
Koji
On Thu, Jul 11, 2019 at 7:01 PM Oleg Kalnichevski <ol...@apache.org> wrote:
>
> On Thu, 2019-07-11 at 16:19 +0900, Koji Kawamura wrote:
> > Hello,
> >
> > I found a comment on in the 5.0-BETA4 release note:
> >
> > * Resolved compatibility issues with TLS 1.3 engine shipped with Java
> > 11
> > Contributed by Oleg Kalnichevski <olegk at apache.org>
> >
> https://archive.apache.org/dist/httpcomponents/httpcore/RELEASE_NOTES-5.0.x.txt
> >
> > Is there any JIRA specifically addressing this issue?
> > I could only find this one, but the release note comment sounds like
> > there are others.
> > https://issues.apache.org/jira/browse/HTTPCLIENT-1967
> >
>
> The only one that truly matters is this one
>
> https://bugs.openjdk.java.net/browse/JDK-8212885
>
>
> > Also, I'd like to know if TLS 1.3 with Java 11 is (or will be?)
> > supported by HttpAsyncClient.
> >
>
> HttpAsyncClient 4.1.4 should be fully TLSv1.3 / Java11 compatible but
> one needs to upgrade its HttpCore dependency to version 4.4.11.
>
> Cheers
>
> Oleg
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
> For additional commands, e-mail: httpclient-users-help@hc.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org
Re: TLS 1.3 with Java 11
Posted by Oleg Kalnichevski <ol...@apache.org>.
On Thu, 2019-07-11 at 16:19 +0900, Koji Kawamura wrote:
> Hello,
>
> I found a comment on in the 5.0-BETA4 release note:
>
> * Resolved compatibility issues with TLS 1.3 engine shipped with Java
> 11
> Contributed by Oleg Kalnichevski <olegk at apache.org>
>
https://archive.apache.org/dist/httpcomponents/httpcore/RELEASE_NOTES-5.0.x.txt
>
> Is there any JIRA specifically addressing this issue?
> I could only find this one, but the release note comment sounds like
> there are others.
> https://issues.apache.org/jira/browse/HTTPCLIENT-1967
>
The only one that truly matters is this one
https://bugs.openjdk.java.net/browse/JDK-8212885
> Also, I'd like to know if TLS 1.3 with Java 11 is (or will be?)
> supported by HttpAsyncClient.
>
HttpAsyncClient 4.1.4 should be fully TLSv1.3 / Java11 compatible but
one needs to upgrade its HttpCore dependency to version 4.4.11.
Cheers
Oleg
---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org