This is an automated email from the ASF dual-hosted git repository. markt pushed a commit to branch 10.0.x in repository https://gitbox.apache.org/repos/asf/tomcat.git
commit 19a934641b58cbea63b21880238ac2abeb6344aa Author: Mark Thomas <ma...@apache.org> AuthorDate: Mon Sep 27 09:19:54 2021 +0100 Remove support for undocumented EECDHE --- .../net/openssl/ciphers/OpenSSLCipherConfigurationParser.java | 5 ----- .../net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java | 8 -------- 2 files changed, 13 deletions(-) diff --git a/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java b/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java index 401c2b3..caea744 100644 --- a/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java +++ b/java/org/apache/tomcat/util/net/openssl/ciphers/OpenSSLCipherConfigurationParser.java @@ -182,10 +182,6 @@ public class OpenSSLCipherConfigurationParser { */ private static final String ECDHE = "ECDHE"; /** - * Cipher suites using authenticated ephemeral ECDH key agreement - */ - private static final String EECDHE = "EECDHE"; - /** * Anonymous Elliptic Curve Diffie Hellman cipher suites. */ private static final String AECDH = "AECDH"; @@ -470,7 +466,6 @@ public class OpenSSLCipherConfigurationParser { addListAlias(ECDHE, ecdhe); addListAlias(kEECDH, filterByKeyExchange(allCiphers, Collections.singleton(KeyExchange.EECDH))); - aliases.put(EECDHE, aliases.get(kEECDH)); Set<Cipher> eecdh = filterByKeyExchange(allCiphers, Collections.singleton(KeyExchange.EECDH)); eecdh.removeAll(filterByAuthentication(allCiphers, Collections.singleton(Authentication.aNULL))); addListAlias(EECDH, eecdh); diff --git a/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java b/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java index 0400f1d..dc8b007 100644 --- a/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java +++ b/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java @@ -20,7 +20,6 @@ import java.util.List; import java.util.TreeSet; import org.junit.Assert; -import org.junit.Ignore; import org.junit.Test; public class TestOpenSSLCipherConfigurationParser { @@ -204,13 +203,6 @@ public class TestOpenSSLCipherConfigurationParser { @Test - @Ignore("Contrary to the docs, OpenSSL does not recognise EECDHE") - public void testEECDHE() throws Exception { - testSpecification("EECDHE"); - } - - - @Test public void testAECDH() throws Exception { testSpecification("AECDH"); } --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org