users@servlet-spec.java.net

[servlet-spec users] [jsr369-experts] Historical precedent for ALPNonSE8 request (was: Question about TLS 1.2 Application-Layer Protocol Negotiation Extension)

From: Edward Burns <edward.burns_at_oracle.com>
Date: Thu, 18 Dec 2014 07:25:34 -0800

(Separating out discussion of historical precedent to its own thread)

>>>>> On Wed, 17 Dec 2014 08:34:50 +0000, Mark Thomas <markt_at_apache.org> said:

MT> Does it have to be part of the standard release? Could it be in some
MT> form of add-on much like JSSE was when it was first introduced?

EB> That sounds like some kind of precedent at least. Can you please share
EB> with the group the story of how JSSE was introduced?

MT> I'm not sure how much flavour I am going to be able to add to this.

MT> While I dabbled briefly with Java very early on, I didn't really get
MT> involved until after Java 1.4 was released which included JSSE. However,
MT> for a while I was acting as the release manager for Apache Tomcat 4 and
MT> that had to build with Java 1.3 which did not include JSSE.

MT> Tomcat 4 supported SSL so JSSE was a required dependency at build time
MT> although it was optional at runtime (i.e. you only needed it if you were
MT> going to use SSL). As I recall, it was simply a case of downloading the
MT> right (i.e. the latest) JSSE distribution, unpacking it and putting the
MT> right JARs on the class path.

MT> I imagine something similar working with ALPN and Java 8. Rather than
MT> the optional package being specific to a Java 8 releaseI'd hope it was
MT> written (and Java 8 SE tweaked if necessary) in such a way that it
MT> worked with Java 1.8.0 update XX or later. Containers would simply test
MT> for the presence of ALPN support and use it if available and disable h2
MT> if not.

>>>>> On Wed, 17 Dec 2014 11:02:24 +0900, Eugene Chung() <euigeun_chung_at_tmax.co.kr> said:

EC> I also think there's no such precedent. It must be hard decision for
EC> the Java SE team to make such release. My current thinking is that
EC> around the time of the release of Servlet 4.0 and its
EC> implementations, there may be the official Java SE 9 release with
EC> ALPN support. So WAS vendors who don't have own JSSE provider or
EC> have difficulty to make their own could resort to it.

Ok, I think I have what I was looking for to bring the matter up to the
stakeholders here at Oracle. First I will bring the matter to the Java
EE architecture list with a view toward bringing it up to the people
doing the ALPN work in Java SE.

Ed

-- 
| edward.burns_at_oracle.com | office: +1 407 458 0017
| 48 days til DevNexus 2015
| 58 days til JavaLand 2015
| 68 days til CONFESS 2015