Oracle Unified Directory and encrypt-then-MAC TLS extension
Hi,
we're looking at a requirement to secure certain TLS 1.2 CBC ciphers by using the TLS extension encrypt-then-MAC (RFC 7366). Obviously that's more of a question for the underlying JDK, but since I cannot find a category for that, although we're obviously using a supported Oracle Java 8 JDK, it has to go here.
I cannot seem to find anything about that TLS extension with regards to the JDK or JSSE, in any kind of documentation. (The only TLS extension I find mentioned is SNI.) However, there does seem to be code present for it, as per this since 2018: