[Internal] Which security protocols are enabled in a specific Java Release bundle (eg. Azul Zulu 8.50.0.51 build 1.8.0_275-b01)

Question: What security protocols are enabled in a specific Java Release Bundle?  For example:

zulu8.50.0.51 build jdk1.8.0_275-b01

 

Answer: 

Zulu 8.50.0.51 is a OpenJDK 8 released (specifically 1.8.0_275) which implements the following protocols:

  • SSLv2Hello
  • SSLv3
  • TLSv1
  • TLSv1.1
  • TLSv1.2

For more information, you can refer to the following Oracle Blog post.

If you wanted to directly query the JVM itself, you could use the following "ProtocolTest.java" code.  You'll likely see that in this particular version of Java, we support additional protocols, like TLSv1.3.

import javax.net.ssl.SSLSocket;
import javax.net.ssl.SSLContext;
import javax.net.SocketFactory;
import javax.net.ssl.SSLSocketFactory;

public class ProtocolTest {

public static void main(String[] args) throws Exception {

SSLContext context = SSLContext.getInstance("TLS"); context.init(null,null,null);
SSLSocketFactory factory = (SSLSocketFactory)context.getSocketFactory();
SSLSocket socket = (SSLSocket)factory.createSocket();
String[] protocols = socket.getSupportedProtocols();
System.out.println("Supported Protocols: " + protocols.length);
for(int i = 0; i < protocols.length; i++) {
System.out.println(" " + protocols[i]);
}
}
}

For example:

$ javac ProtocolTest.java
$ java ProtocolTest
Supported Protocols: 6
TLSv1.3
TLSv1.2
TLSv1.1
TLSv1
SSLv3
SSLv2Hello

Customer-facing article: https://support.azul.com/hc/en-us/articles/360061894852-Which-security-protocols-are-enabled-in-a-specific-Java-Release-bundle

Add Comment

Comments

0 comments

Article is closed for comments.

Was this article helpful?
0 out of 0 found this helpful