jglobus / JGlobus

jGlobus is a collection of Java client libraries for Globus® Toolkit security, GRAM, and GridFTP.
http://www.globus.org/toolkit/jglobus/
Apache License 2.0
24 stars 44 forks source link

Enable TLS 1.2 clients #137

Closed gbehrmann closed 10 years ago

gbehrmann commented 10 years ago

SSLUtil fails to recognize TLS 1.2 packets. Regardless of whether the server supports TLS 1.2, failure to recognize the header prevents it from falling back to an earlier revision of the protocol.

The change enables forward compatibility. Based on my reading of the TLS 1.2 RFC, I think the server should recognize versions higher than it actually supports and reply with a lower version number. I assume that as long as the TLS major version is unchanged, the header format is compatible.