Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.
Bug 370137 - SslContextFactory does not respect order for [included|excluded]Protocols() and [included|excluded]CipherSuites()
Summary: SslContextFactory does not respect order for [included|excluded]Protocols() a...
Status: RESOLVED FIXED
Alias: None
Product: Jetty
Classification: RT
Component: server (show other bugs)
Version: 7.6.0   Edit
Hardware: PC Linux
: P3 normal (vote)
Target Milestone: 7.5.x   Edit
Assignee: Simone Bordet CLA
QA Contact:
URL:
Whiteboard:
Keywords:
: 385424 (view as bug list)
Depends on:
Blocks:
 
Reported: 2012-01-30 10:30 EST by Simone Bordet CLA
Modified: 2012-07-18 13:07 EDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Simone Bordet CLA 2012-01-30 10:30:48 EST 
When setting sslContextFactory.setIncludedProtocols("TLSv1", "TLSv1.1"), the order is important because it determines what version the client will use in the ClientHello SSL message.
Currently, included protocols are stored in a HashSet, thereby losing ordering.
Comment 1 Simone Bordet CLA 2012-02-06 03:45:18 EST 
Fixed by using LinkedHashSets where relevant.
Comment 2 Simone Bordet CLA 2012-07-18 13:07:48 EDT 
*** Bug 385424 has been marked as a duplicate of this bug. ***