[jira] [Commented] (AMQ-9661) ActiveMQ client jar code is sending both TLSv1.2 and TLSv1.3 in the ClientHello message, even when TLSv1.3 ssl context is set in SSLContext

["Jean-Baptiste Onofré (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AMQ-9661?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17932659#comment-17932659 ] 

Jean-Baptiste Onofré commented on AMQ-9661:
-------------------------------------------

Can you please provide a reproducer or test case ?

> ActiveMQ client jar code is sending both TLSv1.2 and TLSv1.3 in the ClientHello message, even when TLSv1.3 ssl context is set in SSLContext
> -------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: AMQ-9661
>                 URL: https://issues.apache.org/jira/browse/AMQ-9661
>             Project: ActiveMQ Classic
>          Issue Type: Bug
>         Environment: We are configuring *ActiveMQ client classes* to use *TLSv1.3* explicitly by setting the {{org.apache.activemq.broker.SslContext}} as follows:
> SslContext mqSslcontext = new SslContext();
> mqSslcontext .setCurrentSslContext( javax.net.ssl.SSLContext.getInstance("TLSv1.3"))
> However, during the {*}SSL handshake{*}, the *ClientHello* message sent by ActiveMQ still includes both *TLSv1.2 and TLSv1.3* in the {{supported_versions}} extension, instead of restricting it to *TLSv1.3.*
>  
>  * {*}ActiveMQ jars Version{*}: 6.1.5
>  * {*}JDK Version{*}: JDK 17
>  * {*}Operating System{*}: linux
>            Reporter: Sumit Sharma
>            Assignee: Jean-Baptiste Onofré
>            Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@activemq.apache.org
For additional commands, e-mail: issues-help@activemq.apache.org
For further information, visit: https://activemq.apache.org/contact