TLSv1.3 - 现在可以在 Java 8 中使用吗？
TLSv1.3 - is it available now in Java 8?
最近我注意到一些 SMTP（邮件）客户端试图通过使用 STARTTLS 命令并在握手期间指定 TLSv1.3 版本来连接到 SMTP 服务器。目前启用了 TLSv1.2 和一些其他选项。那么，是否现在可以使用 TLSv1.3 了？还是黑客又来玩了:)?
它在任何地方都不可用。它甚至还不是一个合适的草案，更不用说 RFC 了。据我所知只是一个愿望清单。
编辑 显然这是一个过期的答案，因为 TLS 1.3 总有一天会成为标准并被广泛采用。它现在已经发生并且在 Java 1.8.
的后期版本中可用
现在 TLSv1.3 不再处于草案阶段，可能会有它的最终（大概）实现。
TLSv1.3 seems to be in Java 11 and later 并且我没有看到任何迹象表明对 Java 的任何先前版本添加了支持。听起来是时候开始认真考虑 Oracle 的 Java 更快发布时间表并上车了。
(请注意，此答案最初于 2018 年提交。它不再准确，具有最新信息的答案具有更高的排名。)
任何感兴趣的人 and/or 期待 Java 8 中的 TLSv1.3 支持。Azul 最近发布了 JDK 8 版本，支持 TLSv.1.3。
OpenJSSE, an open source implementation of TLS 1.3 for Java SE 8, and
has included it in the latest releases of its Zulu Community and Zulu
Enterprise products. Source code, example use cases and documentation
for this essential security standard are available on GitHub under the
OpenJSSE project at https://github.com/OpenJSSE/openjsse.
The TLS 1.3 standard was released in August 2018 and is a successor to
TLS 1.2 and previous Secure Sockets Layer (SSL) standards that have
been part of Internet-based secure communications for many years. TLS
1.3 support has been included in Java since September 2018 as part of Java SE 11, but support has not been provided in earlier versions of
Java.
Today, nearly all production Java applications are based upon the
earlier Java SE 8 standard, and many developers continue to prefer to
deploy software that can make use of the vast number of libraries,
applications, and utilities that only work on Java SE 8. Existing
Java SE 8 implementations, however, only support TLS up to version
1.2.
Zulu builds of OpenJDK 8 now include the OpenJSSE TLS 1.3 JSSE
provider, which can be used to enable TLS 1.3 support with no
application or code changes. The OpenJSSE provider included with Zulu
8 can also be used programmatically to code to TLS 1.3 and RSASSA-PSS
capabilities not directly available via the Java SE 8 APIs. A release
of Azul’s Zing JVM supporting TLS 1.3 with Java 8 will be made
generally available by the end of July.
TLS 1.3 现已正式移植到 Java8。:)
- 从 Oracle JDK 的 8u261-b12 开始：https://www.oracle.com/java/technologies/javase/8u261-relnotes.html
- 从 AdoptOpen 的 8u262-b10 开始JDK (Eclipse Adoptium)
最近我注意到一些 SMTP（邮件）客户端试图通过使用 STARTTLS 命令并在握手期间指定 TLSv1.3 版本来连接到 SMTP 服务器。目前启用了 TLSv1.2 和一些其他选项。那么，是否现在可以使用 TLSv1.3 了？还是黑客又来玩了:)?
它在任何地方都不可用。它甚至还不是一个合适的草案，更不用说 RFC 了。据我所知只是一个愿望清单。
编辑 显然这是一个过期的答案，因为 TLS 1.3 总有一天会成为标准并被广泛采用。它现在已经发生并且在 Java 1.8.
的后期版本中可用现在 TLSv1.3 不再处于草案阶段，可能会有它的最终（大概）实现。
TLSv1.3 seems to be in Java 11 and later 并且我没有看到任何迹象表明对 Java 的任何先前版本添加了支持。听起来是时候开始认真考虑 Oracle 的 Java 更快发布时间表并上车了。
(请注意，此答案最初于 2018 年提交。它不再准确，具有最新信息的答案具有更高的排名。)
任何感兴趣的人 and/or 期待 Java 8 中的 TLSv1.3 支持。Azul 最近发布了 JDK 8 版本，支持 TLSv.1.3。
OpenJSSE, an open source implementation of TLS 1.3 for Java SE 8, and has included it in the latest releases of its Zulu Community and Zulu Enterprise products. Source code, example use cases and documentation for this essential security standard are available on GitHub under the OpenJSSE project at https://github.com/OpenJSSE/openjsse.
The TLS 1.3 standard was released in August 2018 and is a successor to TLS 1.2 and previous Secure Sockets Layer (SSL) standards that have been part of Internet-based secure communications for many years. TLS 1.3 support has been included in Java since September 2018 as part of Java SE 11, but support has not been provided in earlier versions of Java.
Today, nearly all production Java applications are based upon the earlier Java SE 8 standard, and many developers continue to prefer to deploy software that can make use of the vast number of libraries, applications, and utilities that only work on Java SE 8. Existing Java SE 8 implementations, however, only support TLS up to version 1.2.
Zulu builds of OpenJDK 8 now include the OpenJSSE TLS 1.3 JSSE provider, which can be used to enable TLS 1.3 support with no application or code changes. The OpenJSSE provider included with Zulu 8 can also be used programmatically to code to TLS 1.3 and RSASSA-PSS capabilities not directly available via the Java SE 8 APIs. A release of Azul’s Zing JVM supporting TLS 1.3 with Java 8 will be made generally available by the end of July.
TLS 1.3 现已正式移植到 Java8。:)
- 从 Oracle JDK 的 8u261-b12 开始：https://www.oracle.com/java/technologies/javase/8u261-relnotes.html
- 从 AdoptOpen 的 8u262-b10 开始JDK (Eclipse Adoptium)