Note that in general, server certificate change is restricted if endpoint identification is not enabled and the previous handshake is a session-resumption abbreviated initial handshake, unless the identities represented by both certificates can be regarded as the same. Support has been added for the TLS session hash and extended master secret extension (RFC 7627) in JDK JSSE provider. New FeaturesĪdded TLS session hash and extended master secret extension support For more information, see JRE Expiration Date. After either condition is met (new release becoming available or expiration date reached), the JRE will provide additional warnings and reminders to users to update to the newer version. This JRE (version 8u161) will expire with the release of the next critical patch update scheduled for April 17, 2018.įor systems unable to reach the Oracle Servers, a secondary mechanism expires this JRE (version 8u161) on May 17, 2018. Critical patch updates, which contain security vulnerability fixes, are announced one year in advance on Critical Patch Updates, Security Alerts and Third Party Bulletin. The JRE expires whenever a new release with security vulnerability fixes becomes available.
JRE Security Baseline (Full Version String)
