Repository navigation
expose negotiated TLS 1.3 namedgroup in TlsContext / SecurityParameters #2117
Description
Activity
I am also interested in having this information available for PQC tracking of TLS connection for client and server.
@peterdettman Let me know when there is help needed for this enhancement.Added
SecurityParameters.getNegotiatedGroup()as requested. Currently only set for TLS 1.3.Reacted by Robin Schimpf- added a commit that references this issue
on Dec 5, 2025 I'm trying to figure out how to access the
SecurityParameterfrom aSSLEngine. There is obviously no standard API from the JDK but I also found no way to access it from theProvSSLEngineobject (hoping I haven't overlooked something obvious).
If this is currently not possible could this information be made available via theSSLEngineimplementation?- added a commit that references this issue
on Aug 4, 2026
It can be desirable for the TLS server to know which NamedGroup was negotiated for a given connection. I don't believe there currently exists a way to extract this information from a TlsContext.
For this, it might be useful to add a
SecurityParameters.getNegotiatedGroup()similar toSecuriyParameters.getNegotiatedVersion()orSecurityParameters.getCipherSuite().