]> source.dussan.org Git - jgit.git/commit
TLS support on IBM JDKs 30/155130/3
authorThomas Wolf <thomas.wolf@paranor.ch>
Tue, 31 Dec 2019 22:08:10 +0000 (23:08 +0100)
committerMatthias Sohn <matthias.sohn@sap.com>
Fri, 3 Jan 2020 19:48:25 +0000 (20:48 +0100)
commitd661b9f43a091a5b6b5d843f77e79856675435fb
tree842e48924121a8239e8ef3994d58f48be4cedc92
parent9e6f09c7008171032ee0c0cccb34d7fa4b0ddeb6
TLS support on IBM JDKs

SSLContext.getInstance("TLS") by default behaves differently on IBM
JDK than on Oracle or OpenJDK.[1] On IBM JDK one gets sockets that
have only TLSv1 enabled, which makes HTTPS connections fail since most
servers refuse this old protocol version. On Oracle JDK/OpenJDK, one
gets sockets with all available protocol versions enabled.

Explicitly enable all available TLS protocol versions to make
HTTPS connections work also on IBM JDK.

[1] https://www.ibm.com/support/knowledgecenter/en/SSYKE2_8.0.0/com.ibm.java.security.component.80.doc/security-component/jsse2Docs/matchsslcontext_tls.html#matchsslcontext_tls

Bug: 558709
Change-Id: I5ffc57a78e67a6239b9dad54840a49a8ed28930a
Signed-off-by: Thomas Wolf <thomas.wolf@paranor.ch>
Signed-off-by: Matthias Sohn <matthias.sohn@sap.com>
org.eclipse.jgit.http.apache/META-INF/MANIFEST.MF
org.eclipse.jgit.http.apache/src/org/eclipse/jgit/transport/http/apache/HttpClientConnection.java
org.eclipse.jgit/resources/org/eclipse/jgit/internal/JGitText.properties
org.eclipse.jgit/src/org/eclipse/jgit/internal/JGitText.java
org.eclipse.jgit/src/org/eclipse/jgit/transport/http/JDKHttpConnection.java
org.eclipse.jgit/src/org/eclipse/jgit/transport/internal/DelegatingSSLSocketFactory.java [new file with mode: 0644]
org.eclipse.jgit/src/org/eclipse/jgit/util/HttpSupport.java